CVE-2019-12491

moderate-risk

Published 2019-06-19

OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on servers managed by OnApp for XEN/KVM hypervisors. To exploit the vulnerability an attacker has to have control of a single server on a given cloud (e.g. by renting one). From the source server, the attacker can craft any command and trigger the OnApp platform to execute that command with root privileges on a target server.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.6/10 Medium

NETWORK / HIGH complexity

Affected Products (20)

Onapp

Affected Vendors

Onapp

References (4)

Mitigation https://docs.onapp.com/rn/general-security-advisory

Third Party Advisory https://skylightcyber.com/2019/06/07/all-your-cloud-are-belong-to-us-cve-2019-12...

Mitigation https://docs.onapp.com/rn/general-security-advisory

Third Party Advisory https://skylightcyber.com/2019/06/07/all-your-cloud-are-belong-to-us-cve-2019-12...

/ 100

moderate-risk

Severity 20/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 24/34 · High