PT-2021-10843 · Rconfig · Rconfig

Published 2021-08-09 · Updated 2021-08-12 · CVE-2020-23149

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.5

Description The issue allows attackers to perform a SQL injection and access sensitive database information due to the unsanitized dbName parameter in the ajaxDbInstall.php file.

Recommendations For rConfig version 3.9.5, consider sanitizing the dbName parameter in the ajaxDbInstall.php file to prevent SQL injection attacks. As a temporary workaround, restrict access to the ajaxDbInstall.php file until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-23149

Affected Products

Rconfig

References · 5

• 🔥 https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L35 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-23149 · Security Note
• https://osv.dev/vulnerability/CVE-2020-23149 · Vendor Advisory
• https://t.me/cibsecurity/27039 · Telegram Post
• https://t.me/cvenotify/19187 · Telegram Post