CVE-2022-31086 Incorrect Regular Expressions in ldap-account-manager

2022-06-2720:50:21

CWE-74

GitHub_M

www.cve.org

cve-2022-31086

incorrect regular expressions

remote code execution

ldap account manager

directory access

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.007

Percentile

80.6%

JSON

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.

CNA Affected

[
  {
    "product": "lam",
    "vendor": "LDAPAccountManager",
    "versions": [
      {
        "status": "affected",
        "version": "< 8.0"
      }
    ]
  }
]