PT-2020-1558 · Apache+1 · Apache+1

Published 2020-01-06 · Updated 2023-01-31 · CVE-2019-19585

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.3

Description An issue in rConfig allows an attacker to bypass local security restrictions due to insecure privilege management in the /etc/sudoers file. This occurs after an update to the rConfig specific Apache configuration, granting Apache high privileges for certain binaries.

Recommendations For rConfig version 3.9.3, consider restricting the privileges granted to Apache for specific binaries until a patch is available. As a temporary workaround, review and adjust the /etc/sudoers file to ensure that Apache's privileges are limited to necessary tasks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-00557

CVE-2019-19585

Affected Products

Apache

Rconfig

References · 9

• 🔥 https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.sh · Exploit
• 🔥 http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html · Exploit
• 🔥 https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh?token= · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19585 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19585 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00557 · Security Note
• https://vuldb.com/?id.148333 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/174020 · Note
• https://t.me/cvenotify/43234 · Telegram Post