Published:2017/06/06  Last Updated:2017/06/06

JVN#80238098
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution

Overview

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a remote code execution vulnerability.

Note that this vulnerability is different from JVN#20870477 and JVN#01404851.

Products Affected

  • Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier

Description

AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a remote code execution vulnerability.

Impact

When accessing a specially crafted URL, arbitrary code may be executed on the server.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Vendor Status

Vendor Status Last Update Vendor Notes
INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Vulnerable 2017/06/06 INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) website

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

CVSS v3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score: 6.3
Attack Vector(AV) Physical (P) Local (L) Adjacent (A) Network (N)
Attack Complexity(AC) High (H) Low (L)
Privileges Required(PR) High (H) Low (L) None (N)
User Interaction(UI) Required (R) None (N)
Scope(S) Unchanged (U) Changed (C)
Confidentiality Impact(C) None (N) Low (L) High (H)
Integrity Impact(I) None (N) Low (L) High (H)
Availability Impact(A) None (N) Low (L) High (H)
CVSS v2 AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score: 6.8
Access Vector(AV) Local (L) Adjacent Network (A) Network (N)
Access Complexity(AC) High (H) Medium (M) Low (L)
Authentication(Au) Multiple (M) Single (S) None (N)
Confidentiality Impact(C) None (N) Partial (P) Complete (C)
Integrity Impact(I) None (N) Partial (P) Complete (C)
Availability Impact(A) None (N) Partial (P) Complete (C)

Credit

Masato Kinugawa reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2017-2179
JVN iPedia JVNDB-2017-000111