Vulnerabilities > CVE-2017-1000192 - Unspecified vulnerability in Cygnux Syspass

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

cygnux

NVD

Published: 2017-11-17

Updated: 2019-10-03

Summary

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Vulnerable Configurations

Part	Description	Count
Application	Cygnux Cygnux Syspass 1.0.2 Cygnux Syspass 1.0.3 Cygnux Syspass 1.0.4 Cygnux Syspass 1.0.5 Cygnux Syspass 1.0.6 Cygnux Syspass 1.0.7 Cygnux Syspass 1.0.8 Cygnux Syspass 1.0.9 Cygnux Syspass 1.1.2.13 Cygnux Syspass 1.1.2.15 Cygnux Syspass 1.1.2.16 Cygnux Syspass 1.1.2.17 Cygnux Syspass 1.1.2.18 Cygnux Syspass 1.1.2.19 Cygnux Syspass 1.1.2.20 Cygnux Syspass 1.1.2.21 Cygnux Syspass 1.1.2.22 Cygnux Syspass 1.1.2.23 Cygnux Syspass 1.1.2.24 Cygnux Syspass 1.2.0.01 Cygnux Syspass 1.2.0.02 Cygnux Syspass 1.2.0.03 Cygnux Syspass 1.2.0.04 Cygnux Syspass 1.2.0.05 Cygnux Syspass 1.2.0.06 Cygnux Syspass 1.2.0.07 Cygnux Syspass 1.2.0.08 Cygnux Syspass 1.2.0.09 Cygnux Syspass 1.2.0.10 Cygnux Syspass 1.2.0.11 Cygnux Syspass 1.2.0.12 Cygnux Syspass 1.2.0.13 Cygnux Syspass 1.2.0.14 Cygnux Syspass 1.2.0.15 Cygnux Syspass 1.2.0.16 Cygnux Syspass 1.2.0.17 Cygnux Syspass 1.2.0.18 Cygnux Syspass 1.2.0.19 Cygnux Syspass 1.2.0.20 Cygnux Syspass 1.2.0.21 Cygnux Syspass 2.0.0.17011201 Cygnux Syspass 2.0.0.17011202 Cygnux Syspass 2.0.0.17011203 Cygnux Syspass 2.0.0.17011204 Cygnux Syspass 2.0.0.17011301 Cygnux Syspass 2.0.0.17011302 Cygnux Syspass 2.0.0.17011601 Cygnux Syspass 2.0.0.17011602 Cygnux Syspass 2.0.0.17011901 Cygnux Syspass 2.0.0.17012301 Cygnux Syspass 2.0.0.17012401 Cygnux Syspass 2.0.0.17012402 Cygnux Syspass 2.0.0.17012501 Cygnux Syspass 2.0.0.17012601 Cygnux Syspass 2.0.0.17012701 Cygnux Syspass 2.0.0.17013001 Cygnux Syspass 2.0.0.17020101 Cygnux Syspass 2.0.0.17020201 Cygnux Syspass 2.0.0.17021301 Cygnux Syspass 2.0.0.17021302 Cygnux Syspass 2.0.0.17021601 Cygnux Syspass 2.0.1.17010901 Cygnux Syspass 2.1.0.17022601 Cygnux Syspass 2.1.0.17030201 Cygnux Syspass 2.1.1.17030601 Cygnux Syspass 2.1.2.17031401 Cygnux Syspass 2.1.3.17031601 Cygnux Syspass 2.1.4.17032801 Cygnux Syspass 2.1.5.17041201 Cygnux Syspass 2.1.6.17041401	70

References

https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901