PHP Object Injection Vulnerability in Bomgar Remote Support Portal Asylum rwxr-xr-x 0 10:30 PM

Filename	PHP Object Injection Vulnerability in Bomgar Remote Support Portal
Permission	rw-r--r--
Author	Asylum
Date and Time	10:30 PM
Label
Action

A security vulnerability has been found in the Bomgar Remote Support Portal version 14.3.1 and earlier versions, which is the part of Bomgar's appliance-based remote support software,  deserialize untrusted data without verifying the validity of the resulting data.

The data can be exploited by both authenticated as well as unauthenticated attackers.

An unauthenticated attacker can inject arbitrary input at one point in vulnerable PHP file, while authenticated attacker can inject at multiple points.

To exploit this vulnerability, the attacker has to find the appropriate classes with beneficial  effects,  if there is no classes with beneficial effects, it is not exploitable.

"One way to exploit this vulnerability is by utilizing the Tracer class. It is used to write stack trace information to a log using a Logger instance, which wraps an instance of PEAR's Log class. By using a Log_file instance as an instance of Log, it is possible to write the arbitrary data to the arbitrary file." The researcher wrote in his blog post.

via E Hacking News - Hacker News and Latest IT Security News PHP Object Injection Vulnerability in Bomgar Remote Support Portal http://ift.tt/1Ix4EOa