CVE-2023-54405

Name of the Vulnerable Software and Affected Versions H3C CVM (affected versions not specified)

Description The Cloud Virtualization Management component of the H3C CAS cloud platform contains an unauthenticated arbitrary file upload flaw. Remote attackers can write arbitrary files by manipulating the token parameter in the '/cas/fileUpload/upload' endpoint, which fails to restrict file types or path traversal. By exploiting path traversal within the token parameter, an attacker can upload a malicious JSP file into a web-accessible directory and execute it to achieve remote code execution as the web-server user. Evidence of exploitation was first observed on 2023-10-14.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.