In this blog post, we will be exploring a newly discovered vulnerability - CVE-2025-1158 - found in the ESAFENET CDG version 5.6.3.154.205_20250114. This vulnerability has been classified as critical, and its exploitation could have serious security implications. The compromised file is addPolicyToSafetyGroup.jsp, affecting an unknown function by manipulating the argument safetyGroupId to conduct an SQL injection attack. The worrisome part is that this attack can be launched remotely.
Exploit Details
CVE-2025-1158 stems from an SQL injection vulnerability in the addPolicyToSafetyGroup.jsp file. The exploitation occurs via the unsafe handling of the safetyGroupId argument. This vulnerability allows an attacker to remotely execute arbitrary SQL commands in the affected application's database.
The exploit takes advantage of the affected application's failure to properly sanitize user-supplied input, which enables an attacker to inject malicious SQL code. This can lead to unauthorized access to the application's database, and potentially to disclosure, modification, or deletion of sensitive data.
Here's a code snippet demonstrating the vulnerability
addPolicyToSafetyGroup.jsp?policyId=[policy_id]&safetyGroupId=1'[SQL_PAYLOAD]
By manipulating the safetyGroupId argument with a crafted SQL payload, an attacker can exploit the vulnerability.
Original References
The CVE-2025-1158 vulnerability was first disclosed in a public forum: [LINK_TO_PUBLIC_DISCLOSURE]. You can also find more information about this vulnerability in the following CVE database entry: [LINK_TO_CVE_DATABASE_ENTRY].
Exploit Usage
It's important to note that the exploit for CVE-2025-1158 is public, which means that cybercriminals can easily find and use it. Anyone using ESAFENET CDG 5.6.3.154.205_20250114 should take immediate action to mitigate the risk and protect their systems.
Vendor Response
The vendor was alerted to this vulnerability before the public disclosure, but they did not respond to address the issue or provide a patch or workaround for the problem. As of now, no official mitigation strategy has been provided by the vendor, which makes this vulnerability even more concerning.
Conclusion
CVE-2025-1158 is a critical vulnerability that can lead to serious consequences for anyone using ESAFENET CDG 5.6.3.154.205_20250114. It's vital that users of this software take proactive steps to protect their systems and, if possible, apply a patch or find a workaround to mitigate the risk associated with this vulnerability. Since the vendor has not provided any official response or guidance, users should stay vigilant and watch for future updates that might address this issue.
Timeline
Published on: 02/10/2025 22:15:37 UTC