PT-2019-9844 · Webgalamb · Webgalamb

Daniel Jones · Published 2019-03-17 · Updated 2019-03-22 · CVE-2018-19512

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0

Description A directory traversal vulnerability in system/ajax.php could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory. The issue is related to the "wgmfile restore" functionality.

Recommendations For versions prior to 7.0, consider restricting access to the system/ajax.php endpoint, specifically the "wgmfile restore" functionality, until a patch is available. As a temporary workaround, avoid using the "wgmfile restore" feature to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-19512

Affected Products

Webgalamb

References · 4

• 🔥 http://seclists.org/fulldisclosure/2019/Jan/15 · Exploit
• 🔥 http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-19512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19512 · Security Note