PT-2020-15931 · Freedombox+1 · Plinth+2

James Valleroy · Published 2020-09-02 · Updated 2020-09-11 · CVE-2020-25073

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreedomBox versions prior to 20.14 Plinth versions prior to 20.14

Description The issue allows remote attackers to obtain sensitive information from the "/server-status" page of the Apache HTTP Server. This is because a connection from the Tor onion service, or from PageKite, is considered a local connection. The Apache mod status module must be enabled for this issue to occur.

Recommendations For FreedomBox versions prior to 20.14, update to version 20.14 or later to resolve the issue. For Plinth versions prior to 20.14, update to version 20.14 or later to resolve the issue. As a temporary workaround, consider disabling the Apache mod status module until a patch is available. Restrict access to the "/server-status" page to minimize the risk of exploitation.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2020-25073

Affected Products

Apache Http Server

Freedombox

Plinth

References · 6

• 🔥 https://salsa.debian.org/freedombox-team/freedombox/-/issues/1935 · Exploit
• https://osv.dev/vulnerability/CVE-2020-25073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25073 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-25073 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-25073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25073 · Vendor Advisory