جزئیات آسیب‌پذیری
CVE-2026-28808
ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)
شرح رسمی (انگلیسی)
Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias. When script_alias maps a URL prefix to a directory outside DocumentRoot, mod_auth evaluates directory-based access controls against the DocumentRoot-relative path while mod_cgi executes the script at the ScriptAlias-resolved path. This path mismatch allows unauthenticated access to CGI scripts that directory rules were meant to protect. This vulnerability is associated with program files lib/inets/src/http_server/mod_alias.erl, lib/inets/src/http_server/mod_auth.erl, and lib/inets/src/http_server/mod_cgi.erl. This issue affects OTP from OTP 17.0 before OTP 26.2.5.19, OTP 27.3.4.10, and OTP 28.4.2, corresponding to inets from 5.10 before 9.1.0.6, 9.3.2.4, and 9.6.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.3بالا | 4.0 | CVEProject cvelistV5 (CNA) (EEF) | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N |
| 7.4بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat OpenStack Platform 16.2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 17.1 | همه | CVEProject cvelistV5 (CNA) |
| erlang | OTP | 07b8f441ca711f9812fad9e9115bab3c3aa92f79 ≤ v | CVEProject cvelistV5 (CNA) |
| erlang | OTP | 17.0 ≤ v | CVEProject cvelistV5 (CNA) |
| erlang | OTP | 5.10 ≤ v | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱۰- https://github.com/erlang/otp/security/advisories/GHSA-3vhp-h532-mc3f relatedvendor-advisory
- https://cna.erlef.org/cves/CVE-2026-28808.html related
- https://osv.dev/vulnerability/EEF-CVE-2026-28808 related
- https://www.erlang.org/doc/system/versions.html#order-of-versions x_version-scheme
- https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79 related
- https://github.com/erlang/otp/commit/8fc71ac6af4fbcc54103bec2983ef22e82942688 patch
- https://github.com/erlang/otp/commit/9dfa0c51eac97866078e808dec2183cb7871ff7c patch
- https://access.redhat.com/security/cve/CVE-2026-28808 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2455909 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28808.json x_sadp-csaf-vex
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۱۸
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۳۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- EEF
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-863Incorrect Authorization
- CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization