PT-2020-18297 · Cerberus · Cerberus Ftp Server Enterprise Edition

Published 2020-01-14 · Updated 2020-01-17 · CVE-2020-5196

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server Enterprise Edition versions prior to 11.0.3 Cerberus FTP Server Enterprise Edition versions prior to 10.0.18

Description The issue allows an authenticated attacker to bypass certain permissions, enabling them to create files, display hidden files, list directories, and list files without the necessary permissions. This is achieved by utilizing the zip and unzip features. As a result, users without the required permission can access files, folders, and hidden files, and can create directories without permission.

Recommendations For versions prior to 11.0.3, update to version 11.0.3 or later to resolve the issue. For versions prior to 10.0.18, update to version 10.0.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the zip and unzip features until a patch is applied.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-5196

Affected Products

Cerberus Ftp Server Enterprise Edition

References · 5

• 🔥 https://doyler.net/security-not-included/cerberus-ftp-vulnerabilities · Exploit
• https://osv.dev/vulnerability/CVE-2020-5196 · Vendor Advisory
• https://cerberusftp.com/zip-unzip-permission-bypass-vulnerability-fixed-in-cerberus-ftp-server-versions-11-0-3-and-10-0-18 · Vendor Advisory
• https://support.cerberusftp.com/hc/en-us/community/topics/360000164199-Announcements · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5196 · Security Note