HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-30463

CVSS 7.8v3.1pub. 2021-04-08upd. 2024-11-21

VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Vestacp Control Panel

    APP
    Vestacp
    ≤ 0.9.8-24
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-46850HIGH7.2ten sam produkt

myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command inj...

CVE-2019-12791HIGH8.8ten sam produkt

A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote at...

CVE-2019-12792HIGH8.8ten sam produkt

A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers...

CVE-2015-4117HIGH8.8ten sam produkt

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell ...

CVE-2022-3967MEDIUM5.3ten sam produkt

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown fu...