CVE-2019-16948 Server-side request forgery in n/a
Attackers can scan internal network ports via SSRF in Enghouse Web Chat, revealing open ports and internal service visibility.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-16948?
CVE-2019-16948 is a critical server-side request forgery vulnerability in n/a, published on 13 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network (as opposed to what general web traffic would see on the product's host). The response from open ports is different than from closed ports. The product does not allow one to change the protocol: anything except http(s) will throw an error; however, it is the type of error that allows one to determine if a port is open or not.
Weakness: CWE-918
Which versions are affected by CVE-2019-16948?
It affects 1 product.
Products include Enghouse Web Chat.
How do I fix CVE-2019-16948?
No fix has been published for CVE-2019-16948 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2019-16948 being exploited?
There is no known exploitation of CVE-2019-16948 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-v8v6-2chv-gcgp.