Control Web Panelに認証回避の脆弱性、1.12で修正
Summary
Control Web Panelのユーザーパネルに、有効なホスティングのユーザー名だけで認証を回避でき、root権限の奪取につながる脆弱性が公表されました。ネットワークから届く環境では修正版へ更新し、適用までは接続元を絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Control Web Panelのユーザーパネルに、有効なホスティングのユーザー名だけで認証を回避でき、root権限の奪取につながる脆弱性が公表されました。ネットワークから届く環境では修正版へ更新し、適用までは接続元を絞ってください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Control Web PanelControl Web Panel |
< 1.12→ 1.12 |
1.12 |
Original description The description as published by the source.
Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow, where CWPUserIndex's unauthenticatedFlow() calls toLoginWithIntendedUri() which emits a redirect header without exit(), allowing PHP execution to continue and the module dispatcher include to run without authentication. Attackers with nothing more than a valid hosting username can bypass authentication to reach user-panel module code paths, enabling a pre-authentication chain to root access.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web disclosure@vulncheck.com
- web vulncheck.com
- web disclosure@vulncheck.com
- web nvd.nist.gov
- web github.com
- web disclosure@vulncheck.com