PT-2022-3279 · Unknown · Ldap Account Manager

Arseniy Sharoglazov · Published 2022-06-16 · Updated 2022-07-15 · CVE-2022-31086

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LDAP Account Manager versions prior to 8.0

Description The issue arises from incorrect regular expressions in LDAP Account Manager, allowing the upload of PHP scripts to the /config/templates/pdf/ directory. This could lead to Remote Code Execution if the directory is accessible to remote users, which is not the default configuration. The estimated number of potentially affected devices worldwide is not specified. There are no reported real-world incidents where this issue was exploited. The vulnerability is related to the upload of PHP scripts to the /config/templates/pdf/ directory, which can be accessed remotely if not properly configured.

Recommendations For versions prior to 8.0, update to version 8.0 to resolve the issue. As a temporary workaround, consider restricting access to the /config/templates/pdf/ directory to prevent remote users from uploading PHP scripts.

Exploit

Fix

RCE

Special Elements Injection

Unrestricted File Upload

Weakness Enumeration

CWE-74

CWE-434

Related Identifiers

BDU:2022-04003

CVE-2022-31086

DSA-5177-1

GHSA-Q9PC-X84W-982X

Affected Products

Ldap Account Manager

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31086.json · Exploit
• https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4 · Patch
• https://debian.org/security/2022/dsa-5177 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31086 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31086 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31086 · Security Note
• https://bdu.fstec.ru/vul/2022-04003 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31086 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5177-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31086 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-31086 · Vendor Advisory
• https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q9pc-x84w-982x · Note
• https://t.me/cibsecurity/45232 · Telegram Post
• https://t.me/cvenotify/32658 · Telegram Post