cnvd - cnvd-2022-15517

CNVD-2022-15517

Vulnerability from cnvd - Published: 2022-03-01

Title

Sysaid Technologies SysAid存在未明漏洞

Description

Sysaid Technologies SysAid是以色列SysAid Technologies（Sysaid Technologies）公司的一套IT服务管理解决方案。 SysAid ITIL存在安全漏洞，攻击者可利用该漏洞通过HTTP POST中的tempFile和fileName参数将服务器文件系统上的任意文件复制到Web根目录。

Severity

中

Patch Name

Sysaid Technologies SysAid存在未明漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.sysaid.com/product/on-premises/latest-release

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-43972

Impacted products

Name
SysAid ITIL 20.4.74 b10

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-43972"
    }
  },
  "description": "Sysaid Technologies SysAid\u662f\u4ee5\u8272\u5217SysAid Technologies\uff08Sysaid Technologies\uff09\u516c\u53f8\u7684\u4e00\u5957IT\u670d\u52a1\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\n\nSysAid ITIL\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7HTTP POST\u4e2d\u7684tempFile\u548cfileName\u53c2\u6570\u5c06\u670d\u52a1\u5668\u6587\u4ef6\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u590d\u5236\u5230Web\u6839\u76ee\u5f55\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.sysaid.com/product/on-premises/latest-release",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-15517",
  "openTime": "2022-03-01",
  "patchDescription": "Sysaid Technologies SysAid\u662f\u4ee5\u8272\u5217SysAid Technologies\uff08Sysaid Technologies\uff09\u516c\u53f8\u7684\u4e00\u5957IT\u670d\u52a1\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nSysAid ITIL\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7HTTP POST\u4e2d\u7684tempFile\u548cfileName\u53c2\u6570\u5c06\u670d\u52a1\u5668\u6587\u4ef6\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u590d\u5236\u5230Web\u6839\u76ee\u5f55\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Sysaid Technologies SysAid\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "SysAid ITIL 20.4.74 b10"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-43972",
  "serverity": "\u4e2d",
  "submitTime": "2022-01-13",
  "title": "Sysaid Technologies SysAid\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2021-43972 (GCVE-0-2021-43972)

Vulnerability from cvelistv5 – Published: 2022-01-11 19:19 – Updated: 2024-08-04 04:10

Summary

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the HTTP POST body.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://www.sysaid.com/it-service-management-soft…	x_refsource_MISC
	https://github.com/atredispartners/advisories/blo…	x_refsource_MISC
	https://github.com/atredispartners/advisories/blo…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:10:17.159Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.sysaid.com/it-service-management-software/incident-management"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0002.md"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0001.md"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the HTTP POST body."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-11T19:19:23",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.sysaid.com/it-service-management-software/incident-management"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0002.md"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0001.md"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-43972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the HTTP POST body."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.sysaid.com/it-service-management-software/incident-management",
              "refsource": "MISC",
              "url": "https://www.sysaid.com/it-service-management-software/incident-management"
            },
            {
              "name": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0002.md",
              "refsource": "MISC",
              "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0002.md"
            },
            {
              "name": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0001.md",
              "refsource": "MISC",
              "url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0001.md"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-43972",
    "datePublished": "2022-01-11T19:19:23",
    "dateReserved": "2021-11-17T00:00:00",
    "dateUpdated": "2024-08-04T04:10:17.159Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2022-15517

CVE-2021-43972 (GCVE-0-2021-43972)

Tags

Sightings

Nomenclature