CVE-2018-19276 : OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerab

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.

Published 2019-03-21 16:00:30

Updated 2023-03-03 18:20:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-19276

Openmrs » Openmrs
Versions from including (>=) 1.12.0 and before (<) 1.12.1
cpe:2.3:a:openmrs:openmrs:*:*:*:*:*:*:*:*
Matching versions
Openmrs » Openmrs
Versions from including (>=) 2.0.0 and before (<) 2.0.8
cpe:2.3:a:openmrs:openmrs:*:*:*:*:*:*:*:*
Matching versions
Openmrs » Openmrs
Versions from including (>=) 2.1.0 and before (<) 2.1.4
cpe:2.3:a:openmrs:openmrs:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-19276

EPSS FAQ

95.67%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-19276

OpenMRS Java Deserialization RCE

Disclosure Date: 2019-02-04

First seen: 2020-04-26

exploit/multi/http/openmrs_deserialization

OpenMRS is an open-source platform that supplies users with a customizable medical record system. There exists an object deserialization vulnerability in the `webservices.rest` module used in OpenMRS Platform. Unauthenticated remote code execution can be ach

More information

CVSS scores for CVE-2018-19276

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
10.0	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3.9	6.0	MITRE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-19276

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-19276

https://know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserialization

OpenMRS - Insecure Object Deserialization
Third Party Advisory
https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607

Critical Security Advisory CVE-2018-19276: 2019-02-04 - Community / Announcements - OpenMRS Talk
Vendor Advisory
http://packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.html

OpenMRS Java Deserialization Remote Code Execution ≈ Packet Storm
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/46327/

OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
Exploit;VDB Entry;Third Party Advisory
http://packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.html

OpenMRS Platform Insecure Object Deserialization ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

Jump to