PT-2023-8891 · Ray · Ray

Published 2023-08-24 · Updated 2024-03-27 · CVE-2023-6019

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ray versions (affected versions not specified)

Description The issue exists due to the lack of neutralization of special elements used in operating system commands. This allows a remote attacker to execute arbitrary commands using specially crafted data. A command injection exists in the cpu profile URL parameter, enabling attackers to execute operating system commands on the system running the Ray dashboard remotely without authentication.

Recommendations For all affected versions, consider disabling access to the cpu profile URL parameter as a temporary workaround until a patch is available. Restrict access to the Ray dashboard to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

OS Command Injection

Path traversal

Weakness Enumeration

CWE-862

CWE-78

CWE-22

CWE-598

CWE-29

Related Identifiers

BDU:2024-02554

BDU:2024-02555

BDU:2024-02556

CVE-2023-6019

GHSA-3PWW-QVR8-6MHP

GHSA-6CXR-8Q3M-JWRR

GHSA-H3XG-WV58-5P43

Affected Products

Ray

References · 31

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51978 · Exploit
• 🔥 https://huntr.com/bounties/d0290f3c-b302-4161-89f2-c13bb28b4cfe · Exploit
• https://osv.dev/vulnerability/GHSA-6cxr-8q3m-jwrr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6021 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6020 · Security Note
• https://bdu.fstec.ru/vul/2024-02555 · Security Note
• https://bdu.fstec.ru/vul/2024-02554 · Security Note
• https://osv.dev/vulnerability/GHSA-h3xg-wv58-5p43 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02556 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6019 · Security Note
• https://osv.dev/vulnerability/GHSA-3pww-qvr8-6mhp · Vendor Advisory
• https://github.com/ray-project/ray · Note
• https://github.com/ray-project/ray/releases/tag/ray-2.8.1 · Note