CVE-2019-5642 MAGICK
Local users can read the private server key due to insecure file permissions, allowing interception of private communications to the Metasploit Pro web interface.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5642?
CVE-2019-5642 is a low-severity vulnerability in Rapid7 Metasploit Pro, published on 6 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Rapid7 Metasploit Pro version 4.16.0-2019081901 and prior suffers from an instance of CWE-732, wherein the unique server.key is written to the file system during installation with world-readable permissions. This can allow other users of the same system where Metasploit Pro is installed to intercept otherwise private communications to the Metasploit Pro web interface.
Weakness: CWE-732
Which versions are affected by CVE-2019-5642?
It affects 1 product.
Products include Rapid7 Metasploit.
How do I fix CVE-2019-5642?
No fix has been published for CVE-2019-5642 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5642 being exploited?
There is no known exploitation of CVE-2019-5642 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 Metasploit Pro
- CVE-2020-7385 Metasploit Framework 'drb_remote_codeexec' code execution
- CVE-2020-7377 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
- CVE-2017-5235 Other in Metasploit Pro
- CVE-2019-5645 Rapid7 Metasploit HTTP Handler Denial of Service
- CVE-2019-5624 Rapid7 Metasploit Framework Zip Import Directory Traversal
Sources
Also known as GHSA-g8mp-gm84-qx6x.