Vulnerability Spotlight: PHP deserialize vulnerability in CloudLinux Imunify360

guest · Nov 22, 2021

Vulnerability Spotlight: PHP deserialize vulnerability in CloudLinux Imunify360 could lead to arbitrary code execution
November 22, 2021
https://blog.talosintelligence.com/2021/11/vulnerability-spotlight-php-deserialize.html

Cisco Talos recently discovered a vulnerability in the Ai-Bolit functionality of CloudLinux Inc Imunify360 that could lead to arbitrary code execution.

Imunify360 is a security platform for web-hosting servers that allows users to configure various settings for real-time website protection and web server security.
Click to expand...

TALOS-2021-1383 (CVE-2021-21956) could be triggered automatically just after the attacker creates a malicious file in the system if Immunify is configured with real-time file system scanning. It could also be triggered if the user scans a malicious file provided by the attacker with Ai-Bolit scanner. The attacker could cause a deserialization condition with controllable data and then execute arbitrary code.
Click to expand...

Users are encouraged to update these affected products as soon as possible: CloudLinux Inc. Imunify360, versions 5.8 and 5.9. Talos tested and confirmed these versions of Imunify360 could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: PHP deserialize vulnerability in CloudLinux Imunify360

guest Guest

Log in or Sign up

Vulnerability Spotlight: PHP deserialize vulnerability in CloudLinux Imunify360

guest Guest

Useful Searches