Vulnerability-Lookup

GHSA-RRMF-FPMM-JPWR

Vulnerability from github – Published: 2022-05-17 02:12 – Updated: 2024-04-25 22:53

Summary

ViMbAdmin CSRF Vulnerabilities

Details

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to 1. add an administrator user via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, 2. remove an administrator user via a crafted GET request to <vimbadmin directory>/application/controllers/DomainController.php, 3. change an administrator password via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, 4. add a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, 5. delete a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, 6. archive a mailbox address via a crafted GET request to <vimbadmin directory>/application/controllers/ArchiveController.php, 7. add an alias address via a crafted POST request to <vimbadmin directory>/application/controllers/AliasController.php, or 8. remove an alias address via a crafted GET request to <vimbadmin directory>/application/controllers/AliasController.php.

Severity

8.8 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "opensolutions/vimbadmin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "3.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2017-6086"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-352"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-25T22:53:10Z",
    "nvd_published_at": "2017-06-27T20:29:00Z",
    "severity": "HIGH"
  },
  "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to\n1. add an administrator user via a crafted POST request to `\u003cvimbadmin directory\u003e/application/controllers/DomainController.php`,\n2. remove an administrator user via a crafted GET request to `\u003cvimbadmin directory\u003e/application/controllers/DomainController.php`,\n3. change an administrator password via a crafted POST request to `\u003cvimbadmin directory\u003e/application/controllers/DomainController.php`,\n4. add a mailbox via a crafted POST request to `\u003cvimbadmin directory\u003e/application/controllers/MailboxController.php`,\n5. delete a mailbox via a crafted POST request to `\u003cvimbadmin directory\u003e/application/controllers/MailboxController.php`,\n6. archive a mailbox address via a crafted GET request to `\u003cvimbadmin directory\u003e/application/controllers/ArchiveController.php`,\n7. add an alias address via a crafted POST request to `\u003cvimbadmin directory\u003e/application/controllers/AliasController.php`, or\n8. remove an alias address via a crafted GET request to `\u003cvimbadmin directory\u003e/application/controllers/AliasController.php`.",
  "id": "GHSA-rrmf-fpmm-jpwr",
  "modified": "2024-04-25T22:53:10Z",
  "published": "2022-05-17T02:12:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6086"
    },
    {
      "type": "WEB",
      "url": "https://github.com/opensolutions/ViMbAdmin/issues/250"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/opensolutions/ViMbAdmin"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/41967"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2017/05/03/7"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "ViMbAdmin CSRF Vulnerabilities"
}

CVE-2017-6086 (GCVE-0-2017-6086)

Vulnerability from cvelistv5 – Published: 2017-06-27 20:00 – Updated: 2024-08-05 15:18

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (2) remove an administrator user via a crafted GET request to <vimbadmin directory>/application/controllers/DomainController.php, (3) change an administrator password via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (4) add a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (5) delete a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (6) archive a mailbox address via a crafted GET request to <vimbadmin directory>/application/controllers/ArchiveController.php, (7) add an alias address via a crafted POST request to <vimbadmin directory>/application/controllers/AliasController.php, or (8) remove an alias address via a crafted GET request to <vimbadmin directory>/application/controllers/AliasController.php.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://www.exploit-db.com/exploits/41967/	exploitx_refsource_EXPLOIT-DB
http://www.openwall.com/lists/oss-security/2017/05/03/7	mailing-listx_refsource_MLIST

Date Public

2017-05-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.781Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "41967",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/41967/"
          },
          {
            "name": "[oss-security] 20170503 [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/05/03/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-05-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (2) remove an administrator user via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (3) change an administrator password via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (4) add a mailbox via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/MailboxController.php, (5) delete a mailbox via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/MailboxController.php, (6) archive a mailbox address via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/ArchiveController.php, (7) add an alias address via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/AliasController.php, or (8) remove an alias address via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/AliasController.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "41967",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/41967/"
        },
        {
          "name": "[oss-security] 20170503 [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/05/03/7"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (2) remove an administrator user via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (3) change an administrator password via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/DomainController.php, (4) add a mailbox via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/MailboxController.php, (5) delete a mailbox via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/MailboxController.php, (6) archive a mailbox address via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/ArchiveController.php, (7) add an alias address via a crafted POST request to \u003cvimbadmin directory\u003e/application/controllers/AliasController.php, or (8) remove an alias address via a crafted GET request to \u003cvimbadmin directory\u003e/application/controllers/AliasController.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "41967",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/41967/"
            },
            {
              "name": "[oss-security] 20170503 [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/05/03/7"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6086",
    "datePublished": "2017-06-27T20:00:00.000Z",
    "dateReserved": "2017-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:18:49.781Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-RRMF-FPMM-JPWR

CVE-2017-6086 (GCVE-0-2017-6086)

Tags

Sightings

Nomenclature