OS Command Injection in mantisbt.sourceforge.net MantisBT
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2019-15715 |
| CWE-ID | CWE-78 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software Subscribe |
MantisBT Web applications / Other software |
| Vendor | mantisbt.sourceforge.net |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) OS Command Injection
EUVDB-ID: #VU30729
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2019-15715
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote privileged user to execute arbitrary code.
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
MitigationInstall update from vendor's website.
Vulnerable software versionsMantisBT: 2.0.0 - 2.22.0
External linkshttp://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501
http://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52
http://github.com/mantisbt/mantisbt/commit/cebfb9acb3686e8904d80bd4bc80720b54ba08e5
http://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14c
http://mantisbt.org/bugs/changelog_page.php?project=mantisbt
http://mantisbt.org/bugs/view.php?id=26091
http://mantisbt.org/bugs/view.php?id=26162
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
