JobScheduler XML eXternal Entity Injection

2014.09.09
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-611


Ogólna skala CVSS: 5.8/10
Znaczenie: 4.9/10
Łatwość wykorzystania: 8.6/10
Wymagany dostęp: Zdalny
Złożoność ataku: Średnia
Autoryzacja: Nie wymagana
Wpływ na poufność: Częściowy
Wpływ na integralność: Brak
Wpływ na dostępność: Częściowy

CVE-2014-5392 =================== "XML eXternal Entity (XXE)" (CWE-611) vulnerability in "JobScheduler" product Vendor =================== Software- & Organisations-Service GmbH Product =================== "JobScheduler is a workload automation tool. It is used to launch JobScheduler objects, such as jobs and/or orders, at the occurrence of time, file or calendar events. JobScheduler was recognised in 2012 by Gartner Inc. with a placement in their Magic Quadrant for workload automation. JobScheduler provides solutions from simple to complex scheduling scenarios. It is available with an open source or a commercial licence." - source: http://www.sos-berlin.com/modules/cjaycontent/index.php?id=osource_scheduler_introduction_en.htm Affected versions =================== This vulnerability affects versions of JobScheduler prior to 1.7.4241 as well as versions prior to 1.6.4246. Patch =================== The vendor has released patches for versions 1.7.x and 1.6.x at http://www.sos-berlin.com/modules/news/article.php?storyid=73 http://www.sos-berlin.com/modules/news/article.php?storyid=74 Reported by =================== This issue was reported to the vendor by Christian Schneider (@cschneider4711) following a responsible disclosure process. Severity =================== High Description =================== Using a specially crafted request to access the web interface of JobScheduler it is possible to cause denial of service situations as well as list directories and contents of (sensitive) files from the filesystem of the server which has the JobScheduler web interface installed. Proof of concept =================== Due to the responsible disclosure process chosen and to not harm unpatched systems, no concrete exploit code will be presented in this advisory. References =================== http://www.sos-berlin.com/modules/news/article.php?storyid=73 http://www.sos-berlin.com/modules/news/article.php?storyid=74 http://www.christian-schneider.net/advisories/CVE-2014-5392.txt

Referencje:

http://www.sos-berlin.com/modules/news/article.php?storyid=73
http://www.sos-berlin.com/modules/news/article.php?storyid=74
http://www.christian-schneider.net/advisories/CVE-2014-5392.txt


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2020, cxsecurity.com

 

Back to Top