CVE-2019-19014

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.

CVSS v3 7.8 HIGH
CVSS v2.0 7.2 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://write-up.github.io/webtitan/	Exploit Third Party Advisory
https://www.webtitan.com/resources/product-updates/	Release Notes Vendor Advisory
https://write-up.github.io/webtitan/	Exploit Third Party Advisory
https://www.webtitan.com/resources/product-updates/	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:33

Type	Values Removed	Values Added
References	~~() https://write-up.github.io/webtitan/ - Exploit, Third Party Advisory~~	() https://write-up.github.io/webtitan/ - Exploit, Third Party Advisory
References	~~() https://www.webtitan.com/resources/product-updates/ - Release Notes, Vendor Advisory~~	() https://www.webtitan.com/resources/product-updates/ - Release Notes, Vendor Advisory

Information

Published : 2019-12-02 17:15

Updated : 2024-11-21 04:33

NVD link : CVE-2019-19014

Mitre link : CVE-2019-19014

CVE.ORG link : CVE-2019-19014

JSON object : View

Products Affected

titanhq

webtitan

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2019-19014", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2019-12-02T17:15:12.263", "references": [{"url": "https://write-up.github.io/webtitan/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.webtitan.com/resources/product-updates/", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://write-up.github.io/webtitan/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.webtitan.com/resources/product-updates/", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access."}, {"lang": "es", "value": "Se detect\u00f3 un problema en TitanHQ WebTitan versiones anteriores a 5.18. Presenta un archivo de sudoers que permite a usuarios con pocos privilegios ejecutar una gran n\u00famero de comandos como root, incluidos mv, chown y chmod. Esto puede ser explotado trivialmente para alcanzar privilegios de root por parte de un atacante con acceso."}], "lastModified": "2024-11-21T04:33:59.780", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9818BB67-8F78-48F0-9587-7C6CB96494B4", "versionEndExcluding": "5.18"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}