title: Arbitrary File Write in High Availability Backup Upload
description:
The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary
files through the backup upload endpoint by using path traversal characters.
This vulnerability is associated with program files PlatformReplicationManager.Java.
This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0
problem types: CWE-23: Relative Path Traversal
affected:
{
defaultStatus: unaffected
platforms: [Linux, Docker, Kubernetes]
product: YugabyteDB Anywhere
vendor: YugabyteDB
versions:
lessThanOrEqual: 2.13, status: affected, version: 2.0, versionType: 2.0 to 2.13
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Fixed in version 2.14 onwards .