{"id":5632,"date":"2024-03-21T11:51:19","date_gmt":"2024-03-21T09:51:19","guid":{"rendered":"https:\/\/tremhost.com\/blog\/?p=5632"},"modified":"2024-03-21T11:51:19","modified_gmt":"2024-03-21T09:51:19","slug":"litespeed-web-server-vulnerabilities","status":"publish","type":"post","link":"https:\/\/tremhost.com\/blog\/litespeed-web-server-vulnerabilities\/","title":{"rendered":"LiteSpeed Web Server vulnerabilities"},"content":{"rendered":"<div class=\"content\" tabindex=\"0\" aria-description=\"\">\n<div class=\"ac-container ac-adaptiveCard\">\n<div class=\"ac-textBlock\">\n<p>Let\u2019s explore some vulnerabilities associated with the <strong>LiteSpeed Web Server (LSWS)<\/strong>. While LSWS is known for its performance and security features, it\u2019s essential to be aware of potential risks. Here are notable vulnerabilities:<\/p>\n<ol>\n<li><strong>CVE-2022-0072: Directory Traversal<\/strong>:\n<ul>\n<li><strong>Severity<\/strong>: Medium (CVSS 5.8)<\/li>\n<li><strong>Description<\/strong>: This vulnerability allows an attacker to bypass security measures and access forbidden files through directory traversal. If the server is compromised, an attacker could create a secret backdoor and exploit this vulnerability.<\/li>\n<li><strong>Affected Versions<\/strong>: OpenLiteSpeed and LiteSpeed Enterprise WebAdmin Console.<\/li>\n<li><a class=\"tooltip-target\" href=\"https:\/\/blog.litespeedtech.com\/2022\/11\/14\/cve-2022-0072-cve-2022-0073-and-cve-2022-0074\/\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-17-group\" rel=\"nofollow noopener\" target=\"_blank\"><strong>Exploit Condition<\/strong>: Requires WebAdmin Authentication and root privileges to upload a custom exploit under <code>\/usr\/local\/lsws\/admin\/html<\/code><\/a><a class=\"ac-anchor sup-target\" href=\"https:\/\/blog.litespeedtech.com\/2022\/11\/14\/cve-2022-0072-cve-2022-0073-and-cve-2022-0074\/\" target=\"_blank\" rel=\"noopener nofollow\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-17\" aria-label=\"1: \/usr\/local\/lsws\/admin\/html\"><sup class=\"citation-sup\">1<\/sup><\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><strong>CVE-2022-0073: Remote Code Execution<\/strong>:\n<ul>\n<li><strong>Severity<\/strong>: High (CVSS 8.8)<\/li>\n<li><strong>Description<\/strong>: An attacker who compromises the server can create a secret backdoor and exploit this vulnerability. <a class=\"tooltip-target\" href=\"https:\/\/blog.litespeedtech.com\/2022\/11\/14\/cve-2022-0072-cve-2022-0073-and-cve-2022-0074\/\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-27-group\" rel=\"nofollow noopener\" target=\"_blank\">Similar to CVE-2022-0072, it applies to OpenLiteSpeed and LiteSpeed Enterprise WebAdmin Console after WebAdmin Authentication<\/a><a class=\"ac-anchor sup-target\" href=\"https:\/\/blog.litespeedtech.com\/2022\/11\/14\/cve-2022-0072-cve-2022-0073-and-cve-2022-0074\/\" target=\"_blank\" rel=\"noopener nofollow\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-27\" aria-label=\"1: Description\"><sup class=\"citation-sup\">1<\/sup><\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><strong>CVE-2022-0074<\/strong>:\n<ul>\n<li><strong>Severity<\/strong>: Not specified<\/li>\n<li><strong>Details<\/strong>: Information about this vulnerability is not explicitly provided in the available sources.<\/li>\n<\/ul>\n<\/li>\n<li><strong>CVE-2021-26758: Privilege Escalation<\/strong>:\n<ul>\n<li><strong>Severity<\/strong>: High (CVSS 8.8)<\/li>\n<li><strong>Description<\/strong>: In OpenLiteSpeed version 1.7.8, attackers can gain root terminal access and execute commands on the host system. <a class=\"tooltip-target\" href=\"https:\/\/blog.litespeedtech.com\/2022\/11\/14\/cve-2022-0072-cve-2022-0073-and-cve-2022-0074\/\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-45-group\" rel=\"nofollow noopener\" target=\"_blank\">This privilege escalation vulnerability poses a significant risk<\/a><a class=\"ac-anchor sup-target\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-26758\" target=\"_blank\" rel=\"noopener nofollow\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-45\" aria-label=\"2: Description\"><sup class=\"citation-sup\">2<\/sup><\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Directory Traversal Vulnerability<\/strong>:\n<ul>\n<li><strong>Severity<\/strong>: Not specified<\/li>\n<li><strong>Description<\/strong>: Versions from 1.5.11 through 1.5.12, 1.6.5 through 1.6.20.1, and 1.7.0 before 1.7.16.1 of LSWS suffer from a directory traversal vulnerability in the OpenLiteSpeed Web Server Dashboard. <a class=\"tooltip-target\" href=\"https:\/\/github.com\/advisories\/GHSA-f532-g5cf-vhjp\" target=\"_blank\" rel=\"noopener nofollow\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-55-group\">Attackers can exploit path traversal<\/a><a class=\"ac-anchor sup-target\" href=\"https:\/\/github.com\/advisories\/GHSA-f532-g5cf-vhjp\" target=\"_blank\" rel=\"noopener nofollow\" data-citationid=\"56a71f66-0472-8920-82bb-15c6051a1b31-55\" aria-label=\"3: Description\"><sup class=\"citation-sup\">3<\/sup><\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p><strong>Mitigation Recommendations<\/strong>:<\/p>\n<ul>\n<li>Regularly update LSWS to the latest versions.<\/li>\n<li>Monitor security advisories and apply patches promptly.<\/li>\n<li>Implement strong access controls and authentication mechanisms.<\/li>\n<li>Audit server configurations and restrict unnecessary privileges.<\/li>\n<\/ul>\n<p>Remember, proactive security practices are crucial to safeguarding your web server. Stay informed and take necessary precautions!<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Let\u2019s explore some vulnerabilities associated with the LiteSpeed Web Server (LSWS). While LSWS is known for its performance and security features, it\u2019s essential to be aware of potential&hellip;<\/p>\n","protected":false},"author":1,"featured_media":5633,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[102,49],"tags":[],"class_list":["post-5632","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-time","category-tips"],"_links":{"self":[{"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/posts\/5632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/comments?post=5632"}],"version-history":[{"count":1,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/posts\/5632\/revisions"}],"predecessor-version":[{"id":5634,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/posts\/5632\/revisions\/5634"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/media\/5633"}],"wp:attachment":[{"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/media?parent=5632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/categories?post=5632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tremhost.com\/blog\/wp-json\/wp\/v2\/tags?post=5632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}