CVE-2020-10560: Weak RNG

Q: What access does an attacker need to exploit this issue?

The attacker does not need authentication or user interaction. Exploitation requires a brute-force attack to recover or guess the SiteKey, which is then placed in a crafted request.

Q: Which endpoints are involved in exploitation?

The crafted URL targets components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php. A successful attack can read files accessible to the webserver account.

Q: What data could be exposed if exploitation succeeds?

Any file readable by the webserver process may be disclosed. The disclosed information could enable further compromise, depending on the files and permissions available to that account.

Published Mar 30, 2020

Updated

An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossncom.php and/or libraries/ossn.lib.upgrade.php.

Affected Software

1 affected component

Opensource-socialnetwork Open Source Social Network<=5.3

Event History

Mar 30, 2020

CVE Published

via MITRE·12:04 PM

Data Sourced

via MITRE·12:04 PM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker does not need authentication or user interaction. Exploitation requires a brute-force attack to recover or guess the SiteKey, which is then placed in a crafted request.

Which endpoints are involved in exploitation?

The crafted URL targets components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php. A successful attack can read files accessible to the webserver account.

What data could be exposed if exploitation succeeds?

Any file readable by the webserver process may be disclosed. The disclosed information could enable further compromise, depending on the files and permissions available to that account.

CVE-2020-10560: Weak RNG

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which endpoints are involved in exploitation?

What data could be exposed if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which endpoints are involved in exploitation?

What data could be exposed if exploitation succeeds?