PT-2021-15294 · Unknown · Concrete Cms

Published 2021-11-19 · Updated 2021-11-23 · CVE-2021-22951

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 8.5.7 Concrete CMS version 8.5.6

Description Unauthorized individuals could view password protected files using view inline in Concrete CMS. The issue has been resolved by checking if a file has a password in view inline and not rendering the file if it does. For version 8.5.6, mitigations were put in place, including restricting file types for view inline to images only and putting a warning in the file manager to advise users.

Recommendations For versions prior to 8.5.7, update to version 8.5.7 or later to resolve the issue. For version 8.5.6, consider restricting file types for view inline to images only and put a warning in the file manager to advise users until a patch is available. As a temporary workaround, consider disabling the view inline function until a patch is available.

Fix

Information Disclosure

IDOR

Weakness Enumeration

CWE-200

CWE-639

Related Identifiers

CVE-2021-22951

GHSA-RHF5-F553-XG82

Affected Products

Concrete Cms

References · 7

• https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22951 · Security Note
• https://osv.dev/vulnerability/GHSA-rhf5-f553-xg82 · Vendor Advisory
• https://hackerone.com/reports/1102014 · Note
• https://t.me/cvenotify/23658 · Telegram Post
• https://t.me/cibsecurity/32739 · Telegram Post