PT-2021-21538 · Unknown · Opengamepanel Ogp-Agent-Linux

Prey · Published 2021-11-09 · Updated 2021-11-12 · CVE-2021-37157

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenGamePanel OGP-Agent-Linux versions through 2021-08-14

Description An issue was discovered in OpenGamePanel OGP-Agent-Linux where the file $HOME/OGP/Cfg/Config.pm contains the root password in cleartext.

Recommendations For OpenGamePanel OGP-Agent-Linux versions through 2021-08-14, consider removing or securing the root password stored in the $HOME/OGP/Cfg/Config.pm file to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-37157

Affected Products

Opengamepanel Ogp-Agent-Linux

References · 6

• 🔥 https://exploit-db.com/exploits/50373 · Exploit
• https://github.com/OpenGamePanel/OGP-Agent-Linux/commits/master · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-37157 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37157 · Vendor Advisory
• https://t.me/cvenotify/23189 · Telegram Post
• https://t.me/cibsecurity/32131 · Telegram Post