PT-2017-12032 · Ivanti · Ivanti Service Desk

Publicado 2017-12-11 · Atualizado 2018-03-28 · CVE-2017-11463

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Service Desk versions 2016.3 through 2017.3

Description The issue allows a normal user to send requests to a specific URI with the target user's username in an HTTP payload to retrieve a key/token and use it to access or update objects belonging to other users, such as user profiles, tickets, and incidents.

Recommendations For Ivanti Service Desk versions 2016.3 through 2017.3, consider restricting access to the specific URI that allows referencing and updating of objects belonging to other users until a patch is available. As a temporary workaround, limit the ability of normal users to send requests with the target user's username in the HTTP payload to prevent unauthorized access to other users' objects.

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

CVE-2017-11463

Produtos afetados

Ivanti Service Desk

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-11463 · Aviso do Fabricante
• https://community.ivanti.com/docs/DOC-66252 · Nota
• https://gist.github.com/lazyhack3r/439e92419c552b5dc82b2f5e832c8bfb · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11463 · Nota de Segurança