CVE-2022-28478 : Security Advisory and Response

SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal, allowing attackers with admin privileges to delete arbitrary files on the remote system.

Understanding CVE-2022-28478

This CVE identifies a vulnerability in SeedDMS versions 6.0.17 and 5.1.24 that enables attackers to perform unauthorized file deletions through a specific functionality.

What is CVE-2022-28478?

SeedDMS 6.0.17 and 5.1.24 are susceptible to a Directory Traversal flaw that permits attackers with admin rights to delete files beyond the intended scope, posing a severe security risk.

The Impact of CVE-2022-28478

The vulnerability allows threat actors with administrative privileges to delete crucial files on the targeted system, potentially leading to data loss or system instability.

Technical Details of CVE-2022-28478

This section delves into the specific technical aspects of the CVE.

Vulnerability Description

The flaw resides in the "Remove file" feature within the "Log files management" menu of SeedDMS, as it lacks proper user input validation, enabling malicious deletion of files.

Affected Systems and Versions

SeedDMS versions 6.0.17 and 5.1.24 are confirmed to be impacted by this vulnerability, indicating that systems running these versions are at risk.

Exploitation Mechanism

Attackers with administrative privileges exploit the lack of input sanitization in the "Remove file" function to traverse directories and delete files beyond the intended scope.

Mitigation and Prevention

Protect your systems from CVE-2022-28478 with the following strategies.

Immediate Steps to Take

Upgrade SeedDMS to a non-vulnerable version or apply patches provided by the vendor.
Restrict admin privileges to minimize the impact of potential attacks.

Long-Term Security Practices

Regularly update SeedDMS and other software to mitigate known vulnerabilities.
Implement access controls to limit users' abilities to delete files or directories.

Patching and Updates

Stay informed about security updates released by SeedDMS and promptly apply patches to address vulnerabilities and enhance system security.