{"id":105422,"date":"2022-10-30T21:36:53","date_gmt":"2022-10-30T19:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-web-interfejse-setevyh-ustrojstv-juniper-postavlyaemyh-s-junos"},"modified":"2022-10-30T21:36:53","modified_gmt":"2022-10-30T19:36:53","slug":"uyazvimosti-v-web-interfejse-setevyh-ustrojstv-juniper-postavlyaemyh-s-junos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-web-interfejse-setevyh-ustrojstv-juniper-postavlyaemyh-s-junos","title":{"rendered":"Vulnerabilitetet n\u00eb web-interfac\u00ebn e pajisjeve rrjetore Juniper, t\u00eb furnizuara me JunOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb nd\u00ebrfaqen web J-Web, e cila p\u00ebrdoret n\u00eb pajisjet rrjetore t\u00eb kompanis\u00eb Juniper q\u00eb jan\u00eb t\u00eb pajisura me sistemin operativ JunOS, jan\u00eb identifikuar disa vulnerabilitete, m\u00eb i rrezikshmi prej t\u00eb cil\u00ebve (CVE-2022-22241) lejon ekzekutimin e kodit tuaj n\u00eb sistem nga distanca pa kaluar autentikimin p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb k\u00ebrkese HTTP t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb. P\u00ebrdoruesve t\u00eb pajisjeve Juniper u rekomandohet t\u00eb instalojn\u00eb p\u00ebrdit\u00ebsimin e firmware-it, dhe n\u00ebse kjo nuk \u00ebsht\u00eb e mundur, t\u00eb sigurojn\u00eb q\u00eb qasja n\u00eb nd\u00ebrfaqen web t\u00eb jet\u00eb bllokuar nga rrjetet e jashtme dhe t\u00eb kufizohet vet\u00ebm n\u00eb hoste t\u00eb besuesh\u00ebm. <\/p>\n

The essence of the vulnerability is that the file path provided by the user is processed in the script \/jsdm\/ajax\/logging_browse.php without filtering the content type prefix before the authentication check. An attacker can submit a malicious phar file disguised as an image and achieve the execution of PHP code contained in the uploaded phar archive, using the 'Phar deserialization' attack method (for example, specifying 'filepath=phar:\/path\/pharfile.jpg' in the request). <\/p>\n

The problem is that when checking the uploaded file using the PHP function is_dir(), this function automatically deserializes metadata from the Phar archive when processing paths that start with 'phar:\/\/'. A similar effect is observed when processing user-submitted file paths in functions like file_get_contents(), fopen(), file(), file_exists(), md5_file(), filemtime(), and filesize(). <\/p>\n

Sulmi komplikohet nga fakti se, p\u00ebrve\u00e7 inicimit t\u00eb ekzekutimit t\u00eb arkivit phar, sulmuesi duhet t\u00eb gjej\u00eb nj\u00eb m\u00ebnyr\u00eb p\u00ebr ta ngarkuar at\u00eb n\u00eb pajisje (n\u00ebp\u00ebrmjet aksesit n\u00eb \/jsdm\/ajax\/logging_browse.php mund t\u00eb specifikohet vet\u00ebm rruga p\u00ebr ekzekutimin e nj\u00eb skedari ekzistues). Disa skenar\u00eb t\u00eb mundsh\u00ebm p\u00ebr transferimin e skedar\u00ebve n\u00eb pajisje p\u00ebrfshijn\u00eb ngarkimin e nj\u00eb skedari phar si n\u00eb dukje nj\u00eb imazh p\u00ebrmes nj\u00eb sh\u00ebrbimi transferimi imazhesh dhe inkuadrimin e skedarit n\u00eb cache t\u00eb p\u00ebrmbajtjes web. <\/p>\n

Vulnerabilitete t\u00eb tjera: <\/p>\n