PowerFolder Java Object Deserialization RCE

critical Nessus Plugin ID 91816

Synopsis

The remote PowerFolder server is affected by a remote code execution vulnerability.

Description

The remote PowerFolder server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections (ACC) library. An unauthenticated, remote attacker can exploit this, by sending specially crafted Java objects to the HTTP interface, to execute arbitrary code on the target host.

Solution

Upgrade to PowerFolder version 10.5.394 or later.

See Also

http://www.nessus.org/u?9c6d83db

https://wiki.powerfolder.com/display/PFC/PowerFolder+Client+10+SP5

http://lab.mogwaisecurity.de/advisories/MSA-2016-01/

Plugin Details

Severity: Critical

ID: 91816

File Name: powerfolder_deserialize_cc.nasl

Version: 1.7

Type: remote

Family: Misc.

Published: 6/24/2016

Updated: 4/7/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: x-cpe:/a:powerfolder:powerfolder

Required KB Items: installed_sw/PowerFolder

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 4/1/2016

Vulnerability Publication Date: 1/28/2015