PT-2024-12836 · Progress · Progress Application Server (Pas) For Openedge

Published 2024-01-18 · Updated 2024-01-26 · CVE-2023-40051

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Progress Application Server (PAS) for OpenEdge versions 11.7 prior to 11.7.18 Progress Application Server (PAS) for OpenEdge versions 12.2 prior to 12.2.13 Progress Application Server (PAS) for OpenEdge innovation releases prior to 12.8.0

Description This issue allows an attacker to formulate a request for a WEB transport that enables unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.

Recommendations For Progress Application Server (PAS) for OpenEdge versions 11.7 prior to 11.7.18, update to version 11.7.18 or later. For Progress Application Server (PAS) for OpenEdge versions 12.2 prior to 12.2.13, update to version 12.2.13 or later. For Progress Application Server (PAS) for OpenEdge innovation releases prior to 12.8.0, update to version 12.8.0 or later. As a temporary workaround, consider restricting access to the WEB transport to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-40051

Affected Products

Progress Application Server (Pas) For Openedge

References · 12

• https://community.progress.com/s/article/Important-Progress-OpenEdge-Critical-Alert-for-Progress-Application-Server-in-OpenEdge-PASOE-Arbitrary-File-Upload-Vulnerability-in-WEB-Transport · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40051 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40051 · Vendor Advisory
• https://progress.com/openedge · Note
• https://twitter.com/autumn_good_35/status/1749441605214339129 · Twitter Post
• https://twitter.com/fridaysecurity/status/1749256387165630803 · Twitter Post
• https://twitter.com/Dinosn/status/1749320231791583377 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1749254946133053833 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1748033955394195471 · Twitter Post
• https://t.me/cvenotify/68839 · Telegram Post
• https://t.me/pentestingnews/42886 · Telegram Post
• https://twitter.com/CVEnew/status/1748004570863685900 · Twitter Post