Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseGHSA-34qg-65m4-f23m
GHSA-34qg-65m4-f23m:
PHP vulnerability analysis and mitigation
Overview
A high severity vulnerability was discovered in Froxlor versions 2.1.9 and earlier (up to 2.2.0-rc3) where the XML templates in lib/configfiles/ set incorrect file permissions (chmod 644) for /etc/pure-ftpd/db/mysql.conf, exposing sensitive database credentials. This vulnerability affects Froxlor instances configured to use pure-ftpd, particularly on Debian 12 systems where parent directories are world-readable by default (GitHub Advisory).
Technical details
The vulnerability (GHSA-34qg-65m4-f23m) stems from improper file permissions configuration where the mysql.conf file is set to chmod 644, making it readable by all users on the system. The vulnerability has a CVSS v3.1 score of 7.3 (High) with the following metrics: Attack Vector: Local, Attack Complexity: Low, Privileges Required: Low, User Interaction: None, Scope: Unchanged, Confidentiality: High, Integrity: High, Availability: Low (GitHub Advisory).
Impact
The vulnerability allows any unprivileged user with command/code execution access to obtain credentials granting access to the Froxlor MySQL database. This access can be exploited even by virtual users without SSH access who can upload PHP scripts or CGIs. More critically, the database access can be leveraged to obtain Froxlor admin privileges and subsequently root privileges through manipulation of admin password hashes, TOTP seed values, and cron daemon settings (GitHub Advisory).
Mitigation and workarounds
The vulnerability has been patched in Froxlor version 2.2.0. As a workaround, it is recommended to use passwordless unix socket authentication. Current versions of MySQL, MariaDB, and Percona support removing database passwords for connections through unix sockets, even when the database user differs from the system account running the database client (GitHub Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management