by Kastro
Paper/Archive/CVE-2023-45239

CVE-2023-45239

Meta tac_plus — A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attack…

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 83.0.830 × 2016.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server.

Affected

ProductAffectedFixed inSource
tac_plus< 4fdf1784fdf178CNA
tac_plus< 4fdf1784fdf178CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/facebook/tac_plus/pull/41refgithub.com/facebook/tac_plus/security/advisories/GHSA-p334-5r3g-4vx3reflists.fedoraproject.org/archives/list/[email protected]/message/X4J7ZYMFZB4G4OU5EDJPQLP6F6RKDGIH