Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-19585.
PoCs published by Jean-Pascal Thomas, Orange Cyberdefense, including Metasploit module exploits/linux/http/rconfig_ajaxarchivefiles_rce.
AI-analyzed exploit summary This Metasploit module exploits a chain of vulnerabilities in rConfig 3.9, including SQL injection for authentication bypass and command injection in the `path` parameter of `ajaxArchiveFiles.php` to achieve remote code execution. It automates the creation of an admin user, authentication, payload execution, and cleanup.
Description
An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.
Exploits (1)
This Metasploit module exploits a chain of vulnerabilities in rConfig 3.9, including SQL injection for authentication bypass and command injection in the `path` parameter of `ajaxArchiveFiles.php` to achieve remote code execution. It automates the creation of an admin user, authentication, payload execution, and cleanup.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H