CVE-2020-5846 File upload in n/a
Authenticated attackers can upload malicious JSP files to any directory, leading to remote code execution and full system access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5846?
CVE-2020-5846 is a high-severity vulnerability in n/a, published on 6 Jan 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full system access as the configured user (e.g., Administrator) when starting from any authenticated session (e.g., a trial account). This is fixed in the 83/830122/cbs-*-hotfix-task26000 builds.
Weakness: CWE-434
Which versions are affected by CVE-2020-5846?
It affects 1 product.
Products include Ahsay Cloud Backup Suite.
How do I fix CVE-2020-5846?
No fix has been published for CVE-2020-5846 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5846 being exploited?
There is no known exploitation of CVE-2020-5846 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wmc6-394v-6mrx.