CVE-2008-6537: Infoleak
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $GET but later accessed using $REQUEST.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify LightNEasy/lightneasy.php so the setup 'do' action is read explicitly from $_GET (e.g. $_GET['do']) instead of using $_REQUEST, ensuring cleared GET values are respected.
LightNEasy/lightneasy.php setup 'do' parameter source = use $_GET only (do not use $_REQUEST) - Configuration
After clearing or validating $_GET['do'], explicitly unset $_REQUEST['do'] (or clear the relevant entries in $_REQUEST) in LightNEasy/lightneasy.php to prevent later accesses from using stale values.
LightNEasy/lightneasy.php $_REQUEST handling for 'do' = unset $_REQUEST['do'] (or clear $_REQUEST) after clearing $_GET['do'] - Compensating control
Restrict access to the LightNEasy.php setup functionality (the 'do' action) to trusted IP addresses or internal networks using web server access controls or a firewall until code is fixed.
- Operational
Rotate the administrator account password (reset credentials) to mitigate potential compromise if the administrator password hash may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6537?
CVE-2008-6537 is considered a medium severity vulnerability due to its potential to expose sensitive administrator password hashes.
How do I fix CVE-2008-6537?
To fix CVE-2008-6537, it is recommended to upgrade to a newer version of LightNEasy that addresses this vulnerability.
What is the impact of CVE-2008-6537?
The impact of CVE-2008-6537 includes the potential for remote attackers to gain access to the administrator password hash, compromising system security.
Who is affected by CVE-2008-6537?
Users of LightNEasy version 1.2 without a database are affected by CVE-2008-6537.
What is the exploit mechanism for CVE-2008-6537?
CVE-2008-6537 exploits the setup "do" action in lightneasy.php, allowing manipulation of parameters via $_REQUEST.