CVE-2020-11941

Vulnerability

Open-AudIT version 3.2.2 contains an OS command injection vulnerability in the Discovery functionality. The vulnerability allows an attacker to inject arbitrary operating system commands via crafted input. The affected version is 3.2.2. [1]

Exploitation

An attacker must have authenticated access to the Open-AudIT web interface. The attacker can send a specially crafted request to the Discovery endpoint, injecting commands that are executed by the server. No additional privileges are required beyond standard user authentication. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary OS commands on the underlying server, leading to full compromise of the system, including data exfiltration, modification, or denial of service. The attacker gains the privileges of the web server user. [1]

Mitigation

The vendor released Open-AudIT version 3.3.0, which addresses this vulnerability. Users should upgrade to version 3.3.0 or later. No workarounds are documented in the available references. [1]