An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0733 | Mitigation Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2019-03-21T14:30:59
Updated: 2022-04-19T18:09:09
Reserved: 2018-01-02T00:00:00
Link: CVE-2018-4059
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-03-21T16:00:54.140
Modified: 2022-06-07T17:18:47.310
Link: CVE-2018-4059
JSON object: View
Redhat Information
No data.
CWE