PT-2018-6398 · Gps Server.Net · Gps-Server.Net Gps Tracking

Noman Riffat · Publicado 2018-01-02 · Atualizado 2018-01-18 · CVE-2017-17097

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: gps-server.net GPS Tracking Software (self hosted) versions 2.x

Description: The issue concerns a password reset procedure that allows immediate password resets upon an unauthenticated request. After the reset, an email is sent with a new, predictable password based on the date, making it easier for remote attackers to gain access by predicting this password. This is due to the use of gmdate for password creation in the fn connect.php file.

Recommendations: For gps-server.net GPS Tracking Software (self hosted) versions 2.x, consider modifying the password reset procedure to generate unpredictable passwords and implement additional authentication steps to prevent unauthorized resets. As a temporary workaround, restrict access to the password reset functionality until a more secure solution is implemented.

Exploit

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2017-17097

Produtos afetados

Gps-Server.Net Gps Tracking

Referências · 5

• 🔥 https://exploit-db.com/exploits/43431 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17097 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17097 · Nota de Segurança
• https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec · Correção
• https://s1.gps-server.net/changelog.txt · Aviso do Fabricante