CVE-2017-7411
CVE-2017-7411
Vexday Risk Score
50Atención
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
Exploit automatizable disponible (Nuclei/Metasploit).
CVSS —EPSS 66.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Ciclo de vida
23 oct 2017Exploit Metasploit disponible
30 oct 2017Publicada en NVD
19 dic 2017PoC pública
Velocidad de armamento
49 díashasta el primer PoC
Recomendación: Planificar corrección próxima — ya existe PoC pública.
An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by malicious users through the REST API interface, and this can be exploited to inject arbitrary PHP objects into the application scope, allowing an attacker to perform a variety of attacks (including but not limited to Remote Code Execution).
Productos afectados
n/a · n/aPoCs públicas encontradas — 3
cve_referencepacketstormsecurity.com/files/144716/Tuleap-9.6-Second-Order-PHP-Object-Injection.htmlno verificadocve_referencewww.exploit-db.com/exploits/43374/no verificadoexploitdbwww.exploit-db.com/exploits/43374no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://karmainsecurity.com/KIS-2017-02http://packetstormsecurity.com/files/144716/Tuleap-9.6-Second-Order-PHP-Object-Injection.htmlhttp://seclists.org/fulldisclosure/2017/Oct/53https://tuleap.net/plugins/tracker/?aid=10118https://www.exploit-db.com/exploits/43374/http://www.openwall.com/lists/oss-security/2017/10/23/3