PT-2022-17681 · Irisnet · Irisnext

Published 2022-04-25 · Updated 2023-08-08 · CVE-2022-26111

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IRISNext versions through 9.8.28

Description The issue allows execution of arbitrary commands on the target server by creating a custom search or editing an existing search of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in the context of the IRISNext application user, running on the web server.

Recommendations For versions through 9.8.28, consider restricting access to the search components to minimize the risk of exploitation. As a temporary workaround, avoid using the BeanShell expressions in the search functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-917

Related Identifiers

CVE-2022-26111

Affected Products

Irisnext

References · 5

• 🔥 https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-26111.pdf · Exploit
• https://varsnext.iriscorporate.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26111 · Security Note
• https://t.me/cibsecurity/41387 · Telegram Post