Vulnerability Description
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Seling | Visual Access Manager | >= 4.15.0, <= 4.29.0 |
Related Weaknesses (CWE)
References
- https://www.seling.it/Product
- https://www.seling.it/product/vam/ProductVendor Advisory
- https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.htmlExploitThird Party Advisory
- https://www.seling.it/Product
- https://www.seling.it/product/vam/ProductVendor Advisory
- https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.htmlExploitThird Party Advisory
FAQ
What is CVE-2019-19988?
CVE-2019-19988 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in...
How severe is CVE-2019-19988?
CVE-2019-19988 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-19988?
Check the references section above for vendor advisories and patch information. Affected products include: Seling Visual Access Manager.