PT-2019-4353 · Centos · Centos Web Panel

Narin Boonwasanarak + 2 · Published 2019-07-15 · Updated 2023-01-24 · CVE-2019-13383

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CentOS Web Panel version 0.9.8.846

Description The issue is related to the login process in CentOS Web Panel, which allows attackers to determine whether a username is valid by analyzing the HTTP response. This is due to a lack of protection for internal data. An attacker could exploit this to reveal protected information.

Recommendations For version 0.9.8.846, as a temporary workaround, consider restricting access to the login process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Side Channel Attack

Weakness Enumeration

CWE-200

CWE-203

Related Identifiers

BDU:2020-00073

CVE-2019-13383

Affected Products

Centos Web Panel

References · 10

• 🔥 https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13383.md · Exploit
• 🔥 https://exploit-db.com/exploits/47125 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13383 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00073 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 · Note
• http://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html · Note
• https://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html · Note
• https://cxsecurity.com/cveshow/CVE-2019-13383 · Note
• https://t.me/cvenotify/42744 · Telegram Post