OPNsense os-acme-clientにコード実行の脆弱性
Summary
OPNsenseのプラグインos-acme-clientに、認証済みの利用者がroot権限で任意のコードを実行できる脆弱性が公表されました。導入の有無を確認し、修正版の公開状況を確かめたうえで、管理画面とAPIへの接続元を絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
OPNsenseのプラグインos-acme-clientに、認証済みの利用者がroot権限で任意のコードを実行できる脆弱性が公表されました。導入の有無を確認し、修正版の公開状況を確かめたうえで、管理画面とAPIへの接続元を絞ってください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| OPNsense | os-acme-client |
≤ 4.17.0 |
— |
Original description The description as published by the source.
An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and gcloud_project into a shell command passed to proc_open() via LeUtils::run_shell_command() without any validation or escaping. A remote authenticated user with privileges to issue or renew certificates through the WebGUI/API can achieve arbitrary code execution as root.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web github.com
- web nvd.nist.gov
- web github.com