Vulnerabilities > CVE-2017-6201 - Server-Side Request Forgery (SSRF) vulnerability in Sandstorm

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

sandstorm

CWE-918

NVD

Published: 2018-02-06

Updated: 2018-03-13

Summary

A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.

Vulnerable Configurations

Part	Description	Count
Application	Sandstorm Sandstorm Sandstorm 0.5 Sandstorm Sandstorm 0.6 Sandstorm Sandstorm 0.7 Sandstorm Sandstorm 0.8 Sandstorm Sandstorm 0.9 Sandstorm Sandstorm 0.10 Sandstorm Sandstorm 0.11 Sandstorm Sandstorm 0.12 Sandstorm Sandstorm 0.13 Sandstorm Sandstorm 0.14 Sandstorm Sandstorm 0.15 Sandstorm Sandstorm 0.16 Sandstorm Sandstorm 0.17 Sandstorm Sandstorm 0.18 Sandstorm Sandstorm 0.19 Sandstorm Sandstorm 0.20 Sandstorm Sandstorm 0.21 Sandstorm Sandstorm 0.22 Sandstorm Sandstorm 0.23 Sandstorm Sandstorm 0.24 Sandstorm Sandstorm 0.25 Sandstorm Sandstorm 0.26 Sandstorm Sandstorm 0.27 Sandstorm Sandstorm 0.28 Sandstorm Sandstorm 0.29 Sandstorm Sandstorm 0.30 Sandstorm Sandstorm 0.31 Sandstorm Sandstorm 0.32 Sandstorm Sandstorm 0.33 Sandstorm Sandstorm 0.34 Sandstorm Sandstorm 0.35 Sandstorm Sandstorm 0.36 Sandstorm Sandstorm 0.37 Sandstorm Sandstorm 0.38 Sandstorm Sandstorm 0.39 Sandstorm Sandstorm 0.40 Sandstorm Sandstorm 0.41 Sandstorm Sandstorm 0.42 Sandstorm Sandstorm 0.43 Sandstorm Sandstorm 0.44 Sandstorm Sandstorm 0.45 Sandstorm Sandstorm 0.46 Sandstorm Sandstorm 0.47 Sandstorm Sandstorm 0.48 Sandstorm Sandstorm 0.49 Sandstorm Sandstorm 0.50 Sandstorm Sandstorm 0.51 Sandstorm Sandstorm 0.52 Sandstorm Sandstorm 0.53 Sandstorm Sandstorm 0.54 Sandstorm Sandstorm 0.55 Sandstorm Sandstorm 0.56 Sandstorm Sandstorm 0.57 Sandstorm Sandstorm 0.58 Sandstorm Sandstorm 0.59 Sandstorm Sandstorm 0.60 Sandstorm Sandstorm 0.61 Sandstorm Sandstorm 0.62 Sandstorm Sandstorm 0.63 Sandstorm Sandstorm 0.64 Sandstorm Sandstorm 0.65 Sandstorm Sandstorm 0.66 Sandstorm Sandstorm 0.67 Sandstorm Sandstorm 0.68 Sandstorm Sandstorm 0.69 Sandstorm Sandstorm 0.70 Sandstorm Sandstorm 0.71 Sandstorm Sandstorm 0.72 Sandstorm Sandstorm 0.73 Sandstorm Sandstorm 0.74 Sandstorm Sandstorm 0.75 Sandstorm Sandstorm 0.76 Sandstorm Sandstorm 0.77 Sandstorm Sandstorm 0.78 Sandstorm Sandstorm 0.79 Sandstorm Sandstorm 0.80 Sandstorm Sandstorm 0.81 Sandstorm Sandstorm 0.82 Sandstorm Sandstorm 0.83 Sandstorm Sandstorm 0.84 Sandstorm Sandstorm 0.85 Sandstorm Sandstorm 0.86 Sandstorm Sandstorm 0.87 Sandstorm Sandstorm 0.88 Sandstorm Sandstorm 0.89 Sandstorm Sandstorm 0.90 Sandstorm Sandstorm 0.91 Sandstorm Sandstorm 0.92 Sandstorm Sandstorm 0.93 Sandstorm Sandstorm 0.94 Sandstorm Sandstorm 0.95 Sandstorm Sandstorm 0.96 Sandstorm Sandstorm 0.97 Sandstorm Sandstorm 0.98 Sandstorm Sandstorm 0.99 Sandstorm Sandstorm 0.100 Sandstorm Sandstorm 0.101 Sandstorm Sandstorm 0.102 Sandstorm Sandstorm 0.103 Sandstorm Sandstorm 0.104 Sandstorm Sandstorm 0.105 Sandstorm Sandstorm 0.106 Sandstorm Sandstorm 0.107 Sandstorm Sandstorm 0.108 Sandstorm Sandstorm 0.109 Sandstorm Sandstorm 0.110 Sandstorm Sandstorm 0.111 Sandstorm Sandstorm 0.112 Sandstorm Sandstorm 0.113 Sandstorm Sandstorm 0.114 Sandstorm Sandstorm 0.115 Sandstorm Sandstorm 0.116 Sandstorm Sandstorm 0.117 Sandstorm Sandstorm 0.118 Sandstorm Sandstorm 0.119 Sandstorm Sandstorm 0.120 Sandstorm Sandstorm 0.121 Sandstorm Sandstorm 0.122 Sandstorm Sandstorm 0.123 Sandstorm Sandstorm 0.124 Sandstorm Sandstorm 0.125 Sandstorm Sandstorm 0.126 Sandstorm Sandstorm 0.127 Sandstorm Sandstorm 0.128 Sandstorm Sandstorm 0.129 Sandstorm Sandstorm 0.130 Sandstorm Sandstorm 0.131 Sandstorm Sandstorm 0.132 Sandstorm Sandstorm 0.133 Sandstorm Sandstorm 0.134 Sandstorm Sandstorm 0.135 Sandstorm Sandstorm 0.136 Sandstorm Sandstorm 0.137 Sandstorm Sandstorm 0.138 Sandstorm Sandstorm 0.139 Sandstorm Sandstorm 0.140 Sandstorm Sandstorm 0.141 Sandstorm Sandstorm 0.142 Sandstorm Sandstorm 0.143 Sandstorm Sandstorm 0.144 Sandstorm Sandstorm 0.145 Sandstorm Sandstorm 0.146 Sandstorm Sandstorm 0.147 Sandstorm Sandstorm 0.148 Sandstorm Sandstorm 0.149 Sandstorm Sandstorm 0.150 Sandstorm Sandstorm 0.151 Sandstorm Sandstorm 0.152 Sandstorm Sandstorm 0.153 Sandstorm Sandstorm 0.154 Sandstorm Sandstorm 0.155 Sandstorm Sandstorm 0.156 Sandstorm Sandstorm 0.157 Sandstorm Sandstorm 0.158 Sandstorm Sandstorm 0.159 Sandstorm Sandstorm 0.160 Sandstorm Sandstorm 0.161 Sandstorm Sandstorm 0.162 Sandstorm Sandstorm 0.163 Sandstorm Sandstorm 0.164 Sandstorm Sandstorm 0.165 Sandstorm Sandstorm 0.166 Sandstorm Sandstorm 0.167 Sandstorm Sandstorm 0.168 Sandstorm Sandstorm 0.169 Sandstorm Sandstorm 0.170 Sandstorm Sandstorm 0.171 Sandstorm Sandstorm 0.172 Sandstorm Sandstorm 0.173 Sandstorm Sandstorm 0.174 Sandstorm Sandstorm 0.175 Sandstorm Sandstorm 0.176 Sandstorm Sandstorm 0.177 Sandstorm Sandstorm 0.178 Sandstorm Sandstorm 0.179 Sandstorm Sandstorm 0.180 Sandstorm Sandstorm 0.181 Sandstorm Sandstorm 0.182 Sandstorm Sandstorm 0.183 Sandstorm Sandstorm 0.184 Sandstorm Sandstorm 0.185 Sandstorm Sandstorm 0.186 Sandstorm Sandstorm 0.187 Sandstorm Sandstorm 0.188 Sandstorm Sandstorm 0.189 Sandstorm Sandstorm 0.190 Sandstorm Sandstorm 0.191 Sandstorm Sandstorm 0.192 Sandstorm Sandstorm 0.193 Sandstorm Sandstorm 0.194 Sandstorm Sandstorm 0.195 Sandstorm Sandstorm 0.196 Sandstorm Sandstorm 0.197 Sandstorm Sandstorm 0.198 Sandstorm Sandstorm 0.199 Sandstorm Sandstorm 0.200 Sandstorm Sandstorm 0.201 Sandstorm Sandstorm 0.202	198

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References