PT-2021-16987 · Afterlogic · Afterlogic Aurora+1

Published 2021-03-04 · Updated 2021-03-11 · CVE-2021-26293

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AfterLogic Aurora versions 8.5.3 and earlier WebMail Pro versions 8.5.3 and earlier

Description An issue allows directory traversal to create new files, such as an executable file under the web root, when DAV is enabled. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x.

Recommendations For AfterLogic Aurora versions 8.5.3 and earlier, consider disabling DAV until a patch is available. For WebMail Pro versions 8.5.3 and earlier, consider disabling DAV until a patch is available. As a temporary workaround, consider restricting access to DAVServer.php and DAV/Server.php to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-26293

Affected Products

Afterlogic Aurora

Webmail Pro

References · 4

• 🔥 https://auroramail.wordpress.com/2021/02/03/addressing-dav-related-vulnerability-in-webmail-and-aurora · Exploit
• https://osv.dev/vulnerability/CVE-2021-26293 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26293 · Security Note
• https://t.me/cibsecurity/24481 · Telegram Post