Lucene search

GitHub Advisory DatabaseGHSA-PW5C-XQF2-6XC2

HistoryMay 17, 2022 - 3:44 a.m.

Doctrine Security Misconfiguration Vulnerability

2022-05-1703:44:28

GitHub Advisory Database

github.com

doctrine

security misconfiguration

vulnerability

php code

cache

world-writable permissions

local users

additional privileges

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.

Affected configurations

Vulners

Node

zfcampuszf-apigility-doctrineRange1.0.0–1.0.3

zendframeworkzendframeworkRange2.4.0–2.4.8

zendframeworkzend-cacheRange2.4.0–2.4.8

doctrinecacheRange1.0.0–1.3.2

awsaws-sdk-phpRange3.0.0–3.2.1

zendframeworkzend-cacheRange2.5.0–2.5.3

zendframeworkzendframework1Range1.12.0–1.12.16

doctrinemongodb-odm-bundleRange<3.0.1

doctrinemongodb-odmRange<1.0.2

doctrineormRange2.5.0–2.5.1

doctrinecommonRange2.5.0-stable–2.5.1

doctrinecommonRange<2.4.3

doctrinecacheRange1.4.0–1.4.2

doctrineannotationsRange<1.2.7

VendorProductVersionCPE
zfcampuszf-apigility-doctrine*cpe:2.3:a:zfcampus:zf-apigility-doctrine:*:*:*:*:*:*:*:*
zendframeworkzendframework*cpe:2.3:a:zendframework:zendframework:*:*:*:*:*:*:*:*
zendframeworkzend-cache*cpe:2.3:a:zendframework:zend-cache:*:*:*:*:*:*:*:*
doctrinecache*cpe:2.3:a:doctrine:cache:*:*:*:*:*:*:*:*
awsaws-sdk-php*cpe:2.3:a:aws:aws-sdk-php:*:*:*:*:*:*:*:*
zendframeworkzendframework1*cpe:2.3:a:zendframework:zendframework1:*:*:*:*:*:*:*:*
doctrinemongodb-odm-bundle*cpe:2.3:a:doctrine:mongodb-odm-bundle:*:*:*:*:*:*:*:*
doctrinemongodb-odm*cpe:2.3:a:doctrine:mongodb-odm:*:*:*:*:*:*:*:*
doctrineorm*cpe:2.3:a:doctrine:orm:*:*:*:*:*:*:*:*
doctrinecommon*cpe:2.3:a:doctrine:common:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zfcampus	zf-apigility-doctrine	*	cpe:2.3:a:zfcampus:zf-apigility-doctrine::::::::
zendframework	zendframework	*	cpe:2.3:a:zendframework:zendframework::::::::
zendframework	zend-cache	*	cpe:2.3:a:zendframework:zend-cache::::::::
doctrine	cache	*	cpe:2.3:a:doctrine:cache::::::::
aws	aws-sdk-php	*	cpe:2.3:a:aws:aws-sdk-php::::::::
zendframework	zendframework1	*	cpe:2.3:a:zendframework:zendframework1::::::::
doctrine	mongodb-odm-bundle	*	cpe:2.3:a:doctrine:mongodb-odm-bundle::::::::
doctrine	mongodb-odm	*	cpe:2.3:a:doctrine:mongodb-odm::::::::
doctrine	orm	*	cpe:2.3:a:doctrine:orm::::::::
doctrine	common	*	cpe:2.3:a:doctrine:common::::::::

Rows per page:

1-10 of 111

References

framework.zend.com/security/advisory/ZF2015-07

www.debian.org/security/2015/dsa-3369

www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html

framework.zend.com/security/advisory/ZF2015-07

github.com/advisories/GHSA-pw5c-xqf2-6xc2

github.com/aws/aws-sdk-php/releases/tag/3.2.1

github.com/FriendsOfPHP/security-advisories/blob/master/aws/aws-sdk-php/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/cache/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-cache/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/CVE-2015-5723.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/zfcampus/zf-apigility-doctrine/CVE-2015-5723.yaml

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IUUC7HPN4XE5NNTG4MR76OC662XRZUO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPS7A54FQ2CR6PH4NDR6UIYJIRNFXW67/

lists.fedoraproject.org/archives/list/[email protected]/message/2IUUC7HPN4XE5NNTG4MR76OC662XRZUO/

lists.fedoraproject.org/archives/list/[email protected]/message/HPS7A54FQ2CR6PH4NDR6UIYJIRNFXW67/

nvd.nist.gov/vuln/detail/CVE-2015-5723

www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for GHSA-PW5C-XQF2-6XC2