CVE-2024-26261 - OpenCVE

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96
https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2024-02-15T02:29:23.672Z

Updated: 2024-08-02T00:07:19.038Z

Reserved: 2024-02-15T01:33:48.679Z

Link: CVE-2024-26261

Vulnrichment

Updated: 2024-08-02T00:07:19.038Z

NVD

Status : Awaiting Analysis

Published: 2024-02-15T03:15:35.083

Modified: 2024-06-28T02:15:03.423

Link: CVE-2024-26261

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26261", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "PUBLISHED", "assignerShortName": "twcert", "dateReserved": "2024-02-15T01:33:48.679Z", "datePublished": "2024-02-15T02:29:23.672Z", "dateUpdated": "2024-08-02T00:07:19.038Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["OAKlouds-organization-2.0", "OAKlouds-organization-3.0"], "product": "OAKlouds", "vendor": "Hgiga", "versions": [{"lessThan": "188", "status": "affected", "version": "earlier", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "modules": ["OAKlouds-webbase-2.0", "OAKlouds-webbase-3.0"], "product": "OAKlouds", "vendor": "Hgiga", "versions": [{"lessThan": "1051", "status": "affected", "version": "earlier", "versionType": "custom"}]}], "datePublic": "2024-02-15T02:29:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded."}], "value": "The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded."}], "impacts": [{"capecId": "CAPEC-76", "descriptions": [{"lang": "en", "value": "CAPEC-76 Manipulating Web Input to File System Calls"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-06-28T02:07:12.109Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html"}, {"tags": ["third-party-advisory"], "url": "https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update OAKlouds-organization-2.0 to 188 or later version <br>Update OAKlouds-organization-3.0 to 188 or later version <br>Update OAKlouds-webbase-2.0 to 1051 or later version <br>Update OAKlouds-webbase-3.0 to 1051 or later version"}], "value": "Update OAKlouds-organization-2.0 to 188 or later version \nUpdate OAKlouds-organization-3.0 to 188 or later version \nUpdate OAKlouds-webbase-2.0 to 1051 or later version \nUpdate OAKlouds-webbase-3.0 to 1051 or later version"}], "source": {"advisory": "TVN-202402003", "discovery": "EXTERNAL"}, "title": "Hgiga OAKlouds - Arbitrary File Read And Delete", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "hgiga", "product": "oaklouds-organization", "cpes": ["cpe:2.3:a:hgiga:oaklouds-organization:2.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "188", "versionType": "custom"}]}, {"vendor": "hgiga", "product": "oaklouds-organization", "cpes": ["cpe:2.3:a:hgiga:oaklouds-organization:3.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "188", "versionType": "custom"}]}, {"vendor": "hgiga", "product": "oaklouds-webbase", "cpes": ["cpe:2.3:a:hgiga:oaklouds-webbase:2.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1051", "versionType": "custom"}]}, {"vendor": "hgiga", "product": "oaklouds-webbase", "cpes": ["cpe:2.3:a:hgiga:oaklouds-webbase:3.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1051", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-29T20:31:28.371408Z", "id": "CVE-2024-26261", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-29T20:36:21.839Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.038Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html"}, {"tags": ["third-party-advisory", "x_transferred"], "url": "https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96", "tags": ["third-party-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:07:19.038Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26261", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-29T20:31:28.371408Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hgiga:oaklouds-organization:2.0:*:*:*:*:*:*:*"], "vendor": "hgiga", "product": "oaklouds-organization", "versions": [{"status": "affected", "version": "0", "lessThan": "188", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:hgiga:oaklouds-organization:3.0:*:*:*:*:*:*:*"], "vendor": "hgiga", "product": "oaklouds-organization", "versions": [{"status": "affected", "version": "0", "lessThan": "188", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:hgiga:oaklouds-webbase:2.0:*:*:*:*:*:*:*"], "vendor": "hgiga", "product": "oaklouds-webbase", "versions": [{"status": "affected", "version": "0", "lessThan": "1051", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:hgiga:oaklouds-webbase:3.0:*:*:*:*:*:*:*"], "vendor": "hgiga", "product": "oaklouds-webbase", "versions": [{"status": "affected", "version": "0", "lessThan": "1051", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-29T20:36:11.844Z"}}], "cna": {"title": "Hgiga OAKlouds - Arbitrary File Read And Delete", "source": {"advisory": "TVN-202402003", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-76", "descriptions": [{"lang": "en", "value": "CAPEC-76 Manipulating Web Input to File System Calls"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hgiga", "modules": ["OAKlouds-organization-2.0", "OAKlouds-organization-3.0"], "product": "OAKlouds", "versions": [{"status": "affected", "version": "earlier", "lessThan": "188", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Hgiga", "modules": ["OAKlouds-webbase-2.0", "OAKlouds-webbase-3.0"], "product": "OAKlouds", "versions": [{"status": "affected", "version": "earlier", "lessThan": "1051", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update OAKlouds-organization-2.0 to 188 or later version \nUpdate OAKlouds-organization-3.0 to 188 or later version \nUpdate OAKlouds-webbase-2.0 to 1051 or later version \nUpdate OAKlouds-webbase-3.0 to 1051 or later version", "supportingMedia": [{"type": "text/html", "value": "Update OAKlouds-organization-2.0 to 188 or later version <br>Update OAKlouds-organization-3.0 to 188 or later version <br>Update OAKlouds-webbase-2.0 to 1051 or later version <br>Update OAKlouds-webbase-3.0 to 1051 or later version", "base64": false}]}], "datePublic": "2024-02-15T02:29:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html", "tags": ["third-party-advisory"]}, {"url": "https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded.", "supportingMedia": [{"type": "text/html", "value": "The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-06-28T02:07:12.109Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26261", "state": "PUBLISHED", "dateUpdated": "2024-08-02T00:07:19.038Z", "dateReserved": "2024-02-15T01:33:48.679Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2024-02-15T02:29:23.672Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}