Description (CNA)
OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative commands by exploiting insufficient distinction between local-only and remote-safe commands in the gateway handler. Attackers can execute administrative commands such as /permissions full_auto through remote chat sessions to change permission modes of a running OpenHarness instance without operator authorization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HKUDS / OpenHarness | affected 0 before dd1d235450dd987b20bff01b7bfb02fe8620a0af |
CWE
CWE-862
References
- https://github.com/HKUDS/OpenHarness/pull/127
- https://github.com/HKUDS/OpenHarness/commit/dd1d235450dd987b20bff01b7bfb02fe8620a0af
- https://www.vulncheck.com/advisories/openharness-remote-administrative-command-injection-via-gateway-handler
ADP enrichment
No English description supplied.
No references supplied.