PT-2022-4188 · Unknown+1 · Passwork On-Premise Edition+1

Arian Rakhimi · Published 2022-03-23 · Updated 2023-03-23 · CVE-2022-25266

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Passwork On-Premise Edition versions prior to 4.6.13

Description The issue is related to incorrect restriction of the path name to a directory with limited access. An attacker can exploit this by manipulating URL parameters to gain access to local files and directories on the server. This allows for directory traversal, enabling the reading of files.

Recommendations For Passwork On-Premise Edition versions prior to 4.6.13, update to version 4.6.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the migration/downloadExportFile endpoint until a patch is available. Avoid using the vulnerable endpoint to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2022-05036

CVE-2022-25266

Affected Products

Passwork

Passwork On-Premise Edition

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-25266 · Security Note
• https://passwork.me · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-25266 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05036 · Security Note
• https://t.me/cibsecurity/39472 · Telegram Post
• https://gist.github.com/garakh/e0e2fe6d6e234f0595dea6a8141568f2 · Note