PT-2021-23960 · Patrowl · Patrowl

Ktg9 + 1 · Published 2021-12-14 · Updated 2022-08-09 · CVE-2021-43828

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: PatrOwl versions prior to 1.77

Description: The issue is related to improper privilege management in PatrowlManager, allowing unlogged-in users to download all finding import files. The files are stored under /media/imports/<owner id>/<tmp file>, where owner id is predictable and tmp file follows a predictable format, such as import <owner id> <time created>. This predictability enables unauthorized access to the files.

Recommendations: Update to version 1.7.7 as soon as possible. As a temporary workaround, consider restricting access to the /media/imports/ directory until the update is applied. Avoid using predictable filenames for import files until the issue is resolved. There are no known workarounds other than updating to the fixed version.

Exploit

Fix

Improper Privilege Management

IDOR

Weakness Enumeration

CWE-269

CWE-639

Related Identifiers

CVE-2021-43828

GHSA-X4WP-XVQ7-W5VR

Affected Products

Patrowl

References · 5

• 🔥 https://huntr.dev/bounties/fe6248f1-603d-43df-816c-c75534a56f72 · Exploit
• https://osv.dev/vulnerability/CVE-2021-43828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43828 · Security Note
• https://github.com/Patrowl/PatrowlManager/security/advisories/GHSA-x4wp-xvq7-w5vr · Note
• https://t.me/cibsecurity/33974 · Telegram Post