Path traversal in pyramid - CVE-2023-41105

Vulnerability identifier: #VU80585

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-41105

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

pyramid
Amazon Linux AMI
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
Python 3 Module
openSUSE Leap
IBM Watson Discovery for IBM Cloud Pak for Data
Netcool Operations Insight
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
MySQL Workbench
Siebel CRM Cloud Applications
python3.5-minimal (Ubuntu package)
python3.11 (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.8 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3-debugsource
libpython3_4m1_0
libpython3_4m1_0-32bit
libpython3_4m1_0-debuginfo-32bit
python3-curses-debuginfo
python3-debuginfo
python3-base-debugsource
python3-base-debuginfo
python3-curses
python3
python3-base
libpython3_4m1_0-debuginfo
python3-dbm
python3-devel
python3-dbm-debuginfo
python3-devel-debuginfo
python3-tk-debuginfo
python3-base-debuginfo-32bit
python3-tk
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python3.11
python3.11 (Red Hat package)
python311-64bit-debuginfo
python311-curses
python311-64bit
python311-32bit
python311-curses-debuginfo
python311-32bit-debuginfo
python311-debuginfo
python311-dbm-debuginfo
python311-debugsource
python311
python311-dbm
python311-tk
python311-idle
python311-tk-debuginfo
python311-base-32bit
python311-base-64bit-debuginfo
python311-devel
python311-base-debuginfo
python311-testsuite
python311-base
libpython3_11-1_0-debuginfo
libpython3_11-1_0-32bit
libpython3_11-1_0-32bit-debuginfo
python311-base-32bit-debuginfo
libpython3_11-1_0-64bit
python311-base-64bit
python311-doc
python311-tools
python311-core-debugsource
libpython3_11-1_0
libpython3_11-1_0-64bit-debuginfo
python311-doc-devhelp
python311-testsuite-debuginfo
python3.12 (Ubuntu package)
python3.12-minimal (Ubuntu package)
dev-python/pypy3
dev-lang/python
EMC ECS
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
EMC Cloud Tiering Appliance
Dell EMC Storage Monitoring and Reporting (SMR)
RecoverPoint for VMs

Install update from vendor's website.

pyramid - update to 2.0.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.0
MySQL Workbench - update to 8.0.36
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.4-1~23.04.2, 3.11.6-3ubuntu0.1
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
Netcool Operations Insight - update to 1.6.12
python3-debugsource - update to 3.4.10-25.116.1
libpython3_4m1_0 - update to 3.4.10-25.116.1
libpython3_4m1_0-32bit - update to 3.4.10-25.116.1
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.116.1
python3-curses-debuginfo - update to 3.4.10-25.116.1
python3-debuginfo - update to 3.4.10-25.116.1
python3-base-debugsource - update to 3.4.10-25.116.1
python3-base-debuginfo - update to 3.4.10-25.116.1
python3-curses - update to 3.4.10-25.116.1
python3 - update to 3.4.10-25.116.1
python3-base - update to 3.4.10-25.116.1
libpython3_4m1_0-debuginfo - update to 3.4.10-25.116.1
python3-dbm - update to 3.4.10-25.116.1
python3-devel - update to 3.4.10-25.116.1
python3-dbm-debuginfo - update to 3.4.10-25.116.1
python3-devel-debuginfo - update to 3.4.10-25.116.1
python3-tk-debuginfo - update to 3.4.10-25.116.1
python3-base-debuginfo-32bit - update to 3.4.10-25.116.1
python3-tk - update to 3.4.10-25.116.1
EMC ECS - update to 3.8.0.5
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.11 - update to 3.11.2-2
python3.11 (Red Hat package) - addressed in versions 3.11.5-1.el8_9, 3.11.5-1.el9_3
python311-64bit-debuginfo - update to 3.11.5-150400.9.20.1
python311-curses - update to 3.11.5-150400.9.20.1
python311-64bit - update to 3.11.5-150400.9.20.1
python311-32bit - update to 3.11.5-150400.9.20.1
python311-curses-debuginfo - update to 3.11.5-150400.9.20.1
python311-32bit-debuginfo - update to 3.11.5-150400.9.20.1
python311-debuginfo - update to 3.11.5-150400.9.20.1
python311-dbm-debuginfo - update to 3.11.5-150400.9.20.1
python311-debugsource - update to 3.11.5-150400.9.20.1
python311 - update to 3.11.5-150400.9.20.1
python311-dbm - update to 3.11.5-150400.9.20.1
python311-tk - update to 3.11.5-150400.9.20.1
python311-idle - update to 3.11.5-150400.9.20.1
python311-tk-debuginfo - update to 3.11.5-150400.9.20.1
python311-base-32bit - update to 3.11.5-150400.9.20.2
python311-base-64bit-debuginfo - update to 3.11.5-150400.9.20.2
python311-devel - update to 3.11.5-150400.9.20.2
python311-base-debuginfo - update to 3.11.5-150400.9.20.2
python311-testsuite - update to 3.11.5-150400.9.20.2
python311-base - update to 3.11.5-150400.9.20.2
libpython3_11-1_0-debuginfo - update to 3.11.5-150400.9.20.2
libpython3_11-1_0-32bit - update to 3.11.5-150400.9.20.2
libpython3_11-1_0-32bit-debuginfo - update to 3.11.5-150400.9.20.2
python311-base-32bit-debuginfo - update to 3.11.5-150400.9.20.2
libpython3_11-1_0-64bit - update to 3.11.5-150400.9.20.2
python311-base-64bit - update to 3.11.5-150400.9.20.2
python311-doc - update to 3.11.5-150400.9.20.2
python311-tools - update to 3.11.5-150400.9.20.2
python311-core-debugsource - update to 3.11.5-150400.9.20.2
libpython3_11-1_0 - update to 3.11.5-150400.9.20.2
libpython3_11-1_0-64bit-debuginfo - update to 3.11.5-150400.9.20.2
python311-doc-devhelp - update to 3.11.5-150400.9.20.2
python311-testsuite-debuginfo - update to 3.11.5-150400.9.20.2
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
IBM Cloud Pak for Watson AIOps - update to 4.4.1
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
Storage Resource Manager - update to 4.10.0.3
RecoverPoint for VMs - update to 6.0.SP1.P1
dev-python/pypy3 - update to 7.3.16
dev-lang/python - update to 7.3.16
EMC Cloud Tiering Appliance - update to 13.1.0.2.35
PowerProtect Data Manager - update to 19.19.0-15
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1

• https://github.com/python/cpython/pull/107982
• https://github.com/python/cpython/pull/107983
• https://github.com/python/cpython/pull/107981
• https://github.com/python/cpython/issues/106242
• https://mail.python.org/archives/list/security-announce@python.org/thread/D6CDW3ZZC5D444YGL3VQUY6D4ECMCQLD/

• Multiple vulnerabilities in Pylons Pyramid
• SUSE update for python3
• SUSE update for python311
• Red Hat Enterprise Linux 9 update for python3.11
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8 update for python3.11
• Dell EMC Cloud Tiering Appliance update for third-party software
• IBM Watson Discovery for IBM Cloud Pak for Data update for Pytho
• Ubuntu update for python3.11
• Multiple vulnerabilities in MySQL Workbench
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Gentoo update for Python, PyPy3
• Ubuntu update for python3.10
• Multiple vulnerabilities in Siebel CRM Cloud Applications
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Amazon Linux AMI update for python3.11
• Multiple vulnerabilities in Dell PowerProtect Data Manager