BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the "Cloud Storage Addin," leading to unauthenticated code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

使用候选路径或通道进行的认证绕过

BigAntSoft BigAnt Server 安全漏洞

BigAntSoft BigAnt Server是BigAntSoft公司的一个即时通讯解决方案。 BigAntSoft BigAnt Server 5.6.06版本及之前版本存在安全漏洞。攻击者利用该漏洞可以通过默认公开的 SaaS 注册机制创建管理员用户，从而上传和执行任意 PHP 代码。

N/A

N/A