PT-2020-12521 · Teclib+1 · Glpi+1

Published 2020-05-12 · Updated 2021-11-04 · CVE-2020-11060

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.6

Description The issue allows an attacker to execute system commands by abusing the backup functionality. This can be exploited by an account with Maintenance privileges and the right to add WIFI networks. Theoretically, it can also be exploited by an attacker without a valid account using a CSRF, although the difficulty of exploitation makes it more conceivable with certain privileges.

Recommendations For versions prior to 9.4.6, update to version 9.4.6 to resolve the issue. As a temporary workaround, consider restricting access to the backup functionality and limiting Maintenance privileges to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

CSRF

Weakness Enumeration

CWE-74

CWE-352

Related Identifiers

ALT-PU-2020-2358

ALT-PU-2020-2455

CVE-2020-11060

GHSA-CVVQ-3FWW-5V6F

Affected Products

Alt Linux

Glpi

References · 18

• 🔥 https://github.com/0xdreadnaught/cve-2020-11060-poc · Exploit
• 🔥 https://exploit-db.com/exploits/49992 · Exploit
• 🔥 https://exploit-db.com/exploits/51726 · Exploit
• https://github.com/glpi-project/glpi/security/advisories/GHSA-cvvq-3fww-5v6f · Patch
• https://github.com/glpi-project/glpi/commit/ad748d59c94da177a3ed25111c453902396f320c · Patch
• https://osv.dev/vulnerability/CVE-2020-11060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11060 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-11060 · Security Note
• https://ubuntu.com/security/CVE-2020-11060 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-11060 · Vendor Advisory
• http://packetstormsecurity.com/files/163119/GLPI-9.4.5-Remote-Code-Execution.html · Note
• https://t.me/secharvester/9175 · Telegram Post
• https://t.me/canyoupwnme/6428 · Telegram Post
• https://t.me/defcon_news/46918 · Telegram Post
• https://t.me/malwr/3629 · Telegram Post