Critical severity · published Feb 5, 2019
CVE-2018-4056
An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9
9.8
CVSS
3%
EPSS
No
On KEV
Description
An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
coTURN · Talos
coTURN 4.5.0.5 · source: vendor, NVD
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-4056
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-4056
Mailing List
https://lists.debian.org/debian-lts-announce/2019/02/msg00017.html
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0730
Third Party Advisory
https://www.debian.org/security/2019/dsa-4373
More from coTURN
9.8
CVE-2018-4059
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9
7.7
CVE-2018-4058
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9