PT-2022-16926 · Unknown · Ldap Account Manager

Arseniy Sharoglazov · Published 2022-04-15 · Updated 2022-10-07 · CVE-2022-24851

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions LDAP Account Manager (LAM) versions prior to 7.9.1

Description The profile editor tool in LDAP Account Manager (LAM) has an edit profile functionality where parameters are not properly sanitized, leading to stored XSS attacks. An authenticated user can store XSS payloads in profiles, which are triggered when another user accesses the edit profile page. The pdf editor tool also has an edit pdf profile functionality with a logoFile parameter that is not properly sanitized, allowing users to enter relative paths to access files. Both issues require an attacker to be able to login to the LAM admin interface.

Recommendations For versions prior to 7.9.1, update to version 7.9.1 to resolve the issue. As a temporary workaround, consider disabling the edit profile functionality and the pdf editor tool until the update is applied. Restrict access to the admin interface to minimize the risk of exploitation. Avoid using the logoFile parameter in the pdf editor tool until the issue is resolved.

Exploit

Fix

Path traversal

XSS

Weakness Enumeration

CWE-22

CWE-79

Related Identifiers

CVE-2022-24851

DSA-5177-1

GHSA-F2FR-CCCR-583V

Affected Products

Ldap Account Manager

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24851.json · Exploit
• 🔥 https://github.com/LDAPAccountManager/lam/issues/170 · Exploit
• https://github.com/LDAPAccountManager/lam/commit/3c6f09a3579e048e224eb5a4c4e3eefaa8bccd49 · Patch
• https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-24851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24851 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5177-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5177 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24851 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24851 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-24851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24851 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24851 · Vendor Advisory
• https://t.me/cvenotify/32656 · Telegram Post