PT-2023-29480 · Yamcs · Yamcs

Andy Olchawa + 1 · Published 2023-10-19 · Updated 2023-10-25 · CVE-2023-45277

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Yamcs version 5.8.6

Description The issue is related to directory traversal in the storage functionality of the API, allowing an attacker to escape the base directory of the buckets, navigate system directories, and read arbitrary files.

Recommendations For Yamcs version 5.8.6, as a temporary workaround, consider restricting access to the storage functionality of the API until a patch is available. Avoid using the API to navigate system directories or read arbitrary files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-45277

GHSA-W4M2-QMH3-2G8F

Affected Products

Yamcs

References · 10

• 🔥 https://linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies · Exploit
• https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7 · Patch
• https://osv.dev/vulnerability/CVE-2023-45277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45277 · Security Note
• https://osv.dev/vulnerability/GHSA-w4m2-qmh3-2g8f · Vendor Advisory
• https://github.com/yamcs/yamcs · Note
• https://t.me/cibsecurity/72587 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1715071776474923195 · Twitter Post
• https://twitter.com/CVEnew/status/1715045333791801597 · Twitter Post
• https://t.me/cvenotify/59958 · Telegram Post