CVE-2017-0360 Tryton Information Disclosure Vulnerability
Authenticated attackers can read arbitrary files on the server via a path traversal flaw in the file opening mechanism.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-0360?
CVE-2017-0360 is a medium-severity path traversal vulnerability in tryton-server before 3.4.0-3+deb8u3, published on 4 Apr 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
Weakness: CWE-269
Which versions are affected by CVE-2017-0360?
15 open source packages ship an affected version, including trytond. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
trytond PyPI | From 3 | 4.2.3 |
trytond PyPI | From 3.0.0 to 3.0.17 | None |
trytond PyPI | From 3.0.0 to 3.0.17 | None |
trytond PyPI | From 3.2.0 to 3.2.17 | None |
trytond PyPI | From 3.2.0 to 3.2.17 | None |
trytond PyPI | From 3.4.0 to 3.4.17 | None |
9 more packages
trytond PyPI | From 3.4.0 to 3.4.17 | None |
trytond PyPI | From 3.6.0 to 3.6.16 | None |
trytond PyPI | From 3.6.0 to 3.6.16 | None |
trytond PyPI | From 3.8.0 to 3.8.14 | None |
trytond PyPI | From 3.8.0 to 3.8.14 | None |
trytond PyPI | From 4.0.0 to 4.0.9 | None |
trytond PyPI | From 4.0.0 to 4.0.9 | None |
trytond PyPI | From 4.2.0 | 4.2.3 |
trytond PyPI | From 4.2.0 | 4.2.3 |
Products include Tryton Tryton.
How do I fix CVE-2017-0360?
Upgrade trytond to 4.2.3 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2017-0360 being exploited?
There is no known exploitation of CVE-2017-0360 in the wild and no public exploit code.
Other vulnerabilities in tryton-server before 3.4.0-3+deb8u3
- CVE-2014-6633 Tryton vulnerable to arbitrary command execution
- CVE-2013-4510 Tryton Directory Traversal vulnerability
- CVE-2018-19443 Session Fixation in Tryton
- CVE-2016-1241 Tryton allows users to read the hashed password
- CVE-2016-1242 Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter
Sources
Also known as DEBIAN-CVE-2017-0360, DLA-882-1, DSA-3826-1, GHSA-7cwg-2575-3546, PYSEC-2017-97, UBUNTU-CVE-2017-0360.