PT-2020-12325 · Openitcockpit+1 · Openitcockpit+1

Dejan Zelic · Published 2020-03-25 · Updated 2020-03-30 · CVE-2020-10791

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3

Description The issue allows remote authenticated users to trigger outbound TCP requests, also known as Server-Side Request Forgery (SSRF), via the Test Connection feature of the Grafana Module. This is achieved through the GrafanaConfigurationController.php file in the app/Plugin/GrafanaModule/Controller directory.

Recommendations For versions prior to 3.7.3, update to version 3.7.3 or later to resolve the issue. As a temporary workaround, consider disabling the Test Connection feature of the Grafana Module until a patch is available. Restrict access to the GrafanaConfigurationController.php file to minimize the risk of exploitation. Avoid using the Test Connection feature in the affected Grafana Module until the issue is resolved.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2020-10791

Affected Products

Grafana

Openitcockpit

References · 6

• https://github.com/it-novum/openITCOCKPIT/commit/50722befae4cfedd0103f9b0ec2a7e22530b2385 · Patch
• https://osv.dev/vulnerability/CVE-2020-10791 · Vendor Advisory
• https://openitcockpit.io/2020/2020/03/23/openitcockpit-3-7-3-released · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10791 · Security Note
• https://t.me/cvenotify/2119 · Telegram Post
• https://t.me/cibsecurity/10803 · Telegram Post