PT-2020-10382 · Artica · Pandora Fms

Askar · Published 2020-01-09 · Updated 2020-01-24 · CVE-2019-20224

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 7.0 NG 742

Description The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip src parameter in an "index.php?operation/netflow/nf live view" request. This is due to a problem in the netflow get stats function in functions netflow.php.

Recommendations For versions prior to 7.0 NG 742, update to Pandora FMS 7.0 NG 742 to resolve the issue. As a temporary workaround, consider restricting access to the netflow get stats function in functions netflow.php to minimize the risk of exploitation. Avoid using the ip src parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-20224

Affected Products

Pandora Fms

References · 9

• 🔥 https://github.com/mhaskar/CVE-2019-20224 · Exploit
• 🔥 http://packetstormsecurity.com/files/155897/Pandora-7.0NG-Remote-Code-Execution.html · Exploit
• 🔥 https://shells.systems/pandorafms-v7-0ng-authenticated-remote-code-execution-cve-2019-20224 · Exploit
• 🔥 https://gist.github.com/mhaskar/2153d66a0928492d76b799ba13b9e3f9 · Exploit
• 🔥 https://drive.google.com/file/d/1DkWR5MylzeNr20jmHXTaAIJmf3YN-lnO/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2019-20224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20224 · Security Note
• https://pandorafms.com/downloads/solved-pandorafms-742.mp4 · Note
• https://t.me/ckure/3217 · Telegram Post