CVE-2019-19020

{"id": "CVE-2019-19020", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2019-12-02T17:15:13.060", "references": [{"url": "https://write-up.github.io/webtitan/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.webtitan.com/resources/product-updates/", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account."}, {"lang": "es", "value": "Se detect\u00f3 un problema en TitanHQ WebTitan versiones anteriores a 5.18. En la interfaz web de administraci\u00f3n, es posible cargar un archivo de copia de seguridad dise\u00f1ado que permite a un atacante ejecutar c\u00f3digo arbitrario al sobrescribir los archivos existentes o agregando nuevos archivos PHP bajo la root web. Esto requiere que el atacante acceda a una cuenta v\u00e1lida de la interfaz web."}], "lastModified": "2019-12-09T18:27:31.880", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9818BB67-8F78-48F0-9587-7C6CB96494B4", "versionEndExcluding": "5.18"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}