Privilege escalation in OpenLiteSpeed



Published: 2021-02-12 | Updated: 2021-02-17
Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID N/A
CWE-ID CWE-269
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
Subscribe 		OpenLiteSpeed
Server applications / Web servers

Vendor LiteSpeed Technologies

Security Bulletin

This security bulletin contains information about 1 vulnerabilities.

Updated: 17.02.2021

Changed bulletin status to patched.

1) Improper Privilege Management

EUVDB-ID: #VU50660

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: N/A

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: Yes

Description

The vulnerability allows a remote user to escalate privileges.

The vulnerability exists due to improper privilege management. A remote administrator can use the extUser or extGroup parameters to gain sudo access and escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

OpenLiteSpeed: 1.7.0 - 1.7.8

External links

http://github.com/litespeedtech/openlitespeed/issues/217


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###