PT-2020-13167 · Solarwinds · Solarwinds Msp Pme Cache Service

Jens Regel · Published 2020-05-07 · Updated 2020-05-15 · CVE-2020-12608

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds MSP PME (Patch Management Engine) Cache Service versions prior to 1.1.15

Description An issue was discovered in the SolarWinds MSP PME Cache Service, where there are insecure file permissions for the directory containing the CacheService.xml configuration file. This can lead to code execution by changing the SISServerURL parameter in the CacheService.xml file.

Recommendations For versions prior to 1.1.15, update to version 1.1.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the %PROGRAMDATA%SolarWinds MSPSolarWinds.MSP.CacheServiceconfig directory to prevent unauthorized changes to the CacheService.xml file.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-12608

Affected Products

Solarwinds Msp Pme Cache Service

References · 7

• 🔥 https://github.com/jensregel/Advisories/tree/master/CVE-2020-12608 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/May/23 · Exploit
• 🔥 http://packetstormsecurity.com/files/157591/SolarWinds-MSP-PME-Cache-Service-Insecure-File-Permissions-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/48448 · Exploit
• https://osv.dev/vulnerability/CVE-2020-12608 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12608 · Security Note
• https://t.me/cvenotify/3623 · Telegram Post