CVE-2017-11467 OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
Remote attackers can execute arbitrary OS commands by bypassing privilege checks in OrientDB query clauses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-11467?
CVE-2017-11467 is a critical vulnerability in n/a, published on 20 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.
Weakness: CWE-269
Which versions are affected by CVE-2017-11467?
2 open source packages ship an affected version, including com.orientechnologies:orientdb-core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.orientechnologies:orientdb-core Maven | All versions | 2.2.23 |
com.orientechnologies:orientdb-core Maven | All versions | 2.2.23 |
Products include Orientdb Orientdb.
How do I fix CVE-2017-11467?
Upgrade com.orientechnologies:orientdb-core to 2.2.23 or later.
Is CVE-2017-11467 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-11467 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in n/a
- CVE-2015-2912 OrientDB-Server vulnerable to Cross-Site Request Forgery
- CVE-2015-2918 OrientDB Studio web management interface is vulnerable to clickjacking attacks
- CVE-2015-2913 OrientDB Server Community Edition uses insufficiently random values to generate session IDs
- CVE-2019-25447 OrientDB 3.0.17 Cross-Site Request Forgery
- CVE-2019-25448 OrientDB 3.0.17 Stored Cross-Site Scripting via User Creation
Sources
Also known as GHSA-xm6r-4466-mr74.