CVE-2024-6580

The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application). IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates.

CVSS

No CVSS.

References

Link	Resource
https://www.nsoftware.com/kb/articles/cve-2024-5806
https://www.nsoftware.com/kb/articles/cve-2024-5806

Configurations

No configuration.

History

21 Nov 2024, 09:49

Type	Values Removed	Values Added
References	~~() https://www.nsoftware.com/kb/articles/cve-2024-5806 -~~	() https://www.nsoftware.com/kb/articles/cve-2024-5806 -

09 Jul 2024, 18:19

Type	Values Removed	Values Added
Summary		(es) Se puede inducir al componente SFTPServer de la librería SSH de IPWorks del software /n a realizar solicitudes no deseadas de ruta de red o de sistema de archivos al cargar un certificado o clave pública SSH. Para ser explotable, una aplicación que llama al componente SFTPServer debe otorgar acceso al usuario sin verificar la clave pública o el certificado SSH (lo que probablemente sería una vulnerabilidad separada en la aplicación que llama). Las versiones 22.0.8945 y 24.0.8945 de IPWorks SSH se lanzaron para abordar esta condición mediante el bloqueo de todas las solicitudes de rutas de red y sistemas de archivos para claves públicas o certificados SSH.

08 Jul 2024, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-07-08 19:15

Updated : 2024-11-21 09:49

NVD link : CVE-2024-6580

Mitre link : CVE-2024-6580

CVE.ORG link : CVE-2024-6580

JSON object : View

Products Affected

No product.

CWE

CWE-1390

Weak Authentication

{"id": "CVE-2024-6580", "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "cvssData": {"safety": "NOT_DEFINED", "version": "4.0", "recovery": "NOT_DEFINED", "baseScore": 2.3, "automatable": "NO", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "modifiedAttackVector": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subsequentSystemIntegrity": "NONE", "vulnerableSystemIntegrity": "NONE", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "confidentialityRequirements": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "vulnerableSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "vulnerableSystemConfidentiality": "LOW", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED"}}]}, "published": "2024-07-08T19:15:10.913", "references": [{"url": "https://www.nsoftware.com/kb/articles/cve-2024-5806", "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://www.nsoftware.com/kb/articles/cve-2024-5806", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "description": [{"lang": "en", "value": "CWE-1390"}]}], "descriptions": [{"lang": "en", "value": "The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application).\u00a0IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates."}, {"lang": "es", "value": "Se puede inducir al componente SFTPServer de la librer\u00eda SSH de IPWorks del software /n a realizar solicitudes no deseadas de ruta de red o de sistema de archivos al cargar un certificado o clave p\u00fablica SSH. Para ser explotable, una aplicaci\u00f3n que llama al componente SFTPServer debe otorgar acceso al usuario sin verificar la clave p\u00fablica o el certificado SSH (lo que probablemente ser\u00eda una vulnerabilidad separada en la aplicaci\u00f3n que llama). Las versiones 22.0.8945 y 24.0.8945 de IPWorks SSH se lanzaron para abordar esta condici\u00f3n mediante el bloqueo de todas las solicitudes de rutas de red y sistemas de archivos para claves p\u00fablicas o certificados SSH."}], "lastModified": "2024-11-21T09:49:55.487", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725"}