PT-2025-38297 · Unknown+1 · Cbis Manager+1

Published 2025-09-18 · Updated 2025-10-26 · CVE-2023-49565

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cbis manager Podman container (affected versions not specified)

Description The cbis manager Podman container is susceptible to remote command execution through the /api/plugins endpoint. Insufficient validation of the HTTP Headers X-FILENAME, X-PAGE, and X-FIELD allows for command injection. These headers are used directly within the subprocess.Popen Python function without proper validation, enabling a remote attacker to execute arbitrary commands on the underlying system by crafting malicious header values in an HTTP request to the affected endpoint. The web service operates with root privileges within the container, meaning successful exploitation can grant an attacker elevated privileges. Restricting access to the management network with an external firewall can offer partial mitigation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-49565

Affected Products

Podman

Cbis Manager

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-49565 · Security Note
• https://t.me/cveNotify/135754 · Telegram Post
• https://t.me/CVEtracker/32823 · Telegram Post
• https://twitter.com/Komodosec/status/1982265814381420646 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1968605757579944383 · Twitter Post
• https://twitter.com/CVEnew/status/1968923648447693110 · Twitter Post
• https://t.me/pentestingnews/68378 · Telegram Post
• https://twitter.com/CrowdCyber_Com/status/1969020925212348776 · Twitter Post
• https://nokia.com/about-us/security-and-privacy/product-security-advisory/CVE-2023-49565 · Note