CVE-2020-15623: (0Day) CentOS Web Panel ajax_mod_security archivo Arbitrary File Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmodsecurity.php. When parsing the archivo parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9722.
Other sources
This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmodsecurity.php. When parsing the archivo parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15623?
The severity of CVE-2020-15623 is critical with a CVSS score of 9.8.
What is the affected software of CVE-2020-15623?
The affected software of CVE-2020-15623 is CentOS Web Panel version 0.9.8.923.
How does CVE-2020-15623 work?
CVE-2020-15623 allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel by exploiting a flaw in the ajax_mod_security.php file.
Is authentication required to exploit CVE-2020-15623?
No, authentication is not required to exploit CVE-2020-15623.
How can I fix CVE-2020-15623?
To fix CVE-2020-15623, it is recommended to update CentOS Web Panel to a patched version provided by the vendor.