PT-2020-12795 · Zftpserver · Provide

Published 2020-04-12 · Updated 2020-04-13 · CVE-2020-11708

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProVide (formerly zFTPServer) versions through 13.1

Description An issue in the software allows for privilege escalation via the "/ajax/SetUserInfo" API endpoint, specifically through the messages parameter. This is due to the EXECUTE() feature, which is designed to execute programs when certain events are triggered.

Recommendations For versions through 13.1, consider disabling the EXECUTE() feature or restricting access to the "/ajax/SetUserInfo" API endpoint to minimize the risk of exploitation. Additionally, avoid using the messages parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-11708

Affected Products

Provide

References · 6

• 🔥 https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Privilege%20Escalation%20via%20EXECUTE() · Exploit
• https://provideserver.com/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11708 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11708 · Vendor Advisory
• https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Privilege%20Escalation%20via%20EXECUTE%28%29 · Note
• https://t.me/cvenotify/2663 · Telegram Post