QID 150390

Date Published: 2021-11-17

QID 150390: Phpfastcache phpinfo exposure (CVE-2021-37704)

Phpfastcache is a high-performance backend cache system. It is intended for use in speeding up dynamic web applications by alleviating database load.

Affected versions of Phpfastcache expose "phpinfo()" file, if the "/vendor" directory is not protected from public access.

phpinfo is a important debugging file containing information on both system and PHP configuration.

Affected versions:
Phpfastcache versions prior to 6.1.5
Phpfastcache versions 7.0.0 to 7.1.1
Phpfastcache versions 8.0.0 to 8.0.6

QID Detection Logic (Unauthenticated) :
This QID sends a HTTP GET request to "/vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php" to retrive the contents of "phpinfo.php" file and based on the response confirms if the target is vulnerable.

Successful exploitation of the vulnerability may allow remote attackers to read contents of "phpinfo" file, which could leak detailed information about the target server. The attacker can further use this information to exploit other vulnerabilities

CVSS V3 rated as Medium - 4.3 severity.

CVSS V2 rated as Medium - 4 severity.

Solution

Customers are advised to upgrade to latest Phpfastcache to remediate this vulnerability. For more information related to this vulnerability please refer to Phpfastcache Security Advisory

Vendor References

Phpfastcache Security Advisory - github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc

CVEs related to QID 150390

CVE-2021-37704 |

Software Advisories

Advisory ID	Software	Component	Link
Phpfastcache Downloads			www.phpfastcache.com/

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].