CVE-2019-15032

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://heitorgouvea.me/2019/09/17/CVE-2019-15032	Exploit Third Party Advisory
https://pydio.com	Product
https://sourceforge.net/projects/ajaxplorer/files/pydio/stable-channel/	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:pydio:pydio:6.0.8:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-09-19 17:15

Updated : 2024-02-04 20:20

NVD link : CVE-2019-15032

Mitre link : CVE-2019-15032

CVE.ORG link : CVE-2019-15032

JSON object : View

Products Affected

pydio

pydio

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2019-15032", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2019-09-19T17:15:12.393", "references": [{"url": "https://heitorgouvea.me/2019/09/17/CVE-2019-15032", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://pydio.com", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/projects/ajaxplorer/files/pydio/stable-channel/", "tags": ["Release Notes"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information."}, {"lang": "es", "value": "Pydio versi\u00f3n 6.0.8, maneja inapropiadamente el reporte de errores cuando un directorio permite cargas no autenticadas, y la opci\u00f3n de carga remota es usada con la URL http://localhost:22. El atacante puede obtener informaci\u00f3n confidencial, tal y como el nombre del usuario que cre\u00f3 ese directorio y otra informaci\u00f3n interna del servidor."}], "lastModified": "2019-09-19T19:44:00.440", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pydio:pydio:6.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EBB93AA-61F0-4F45-94FE-57D8390D454F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}