PT-2019-8421 · Jitbit · Jitbit Helpdesk

Publicado 2019-08-09 · Atualizado 2019-08-19 · CVE-2017-18486

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jitbit Helpdesk versions prior to 9.0.3

Description The issue allows remote attackers to escalate privileges due to mishandling of the userHash parameter in the User/AutoLogin functionality. By inspecting the token value provided in a password reset link, a user can recover the shared secret used by the server for remote authentication. This shared secret can be used to forge new tokens for any user, allowing automatic login as the affected user.

Recommendations For versions prior to 9.0.3, update to version 9.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the password reset functionality to minimize the risk of exploitation. Avoid using the userHash parameter in the affected User/AutoLogin functionality until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-332

Identificadores relacionados

CVE-2017-18486

Produtos afetados

Jitbit Helpdesk

Referências · 6

• 🔥 https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass · Exploit
• 🔥 https://exploit-db.com/exploits/42776 · Exploit
• https://osv.dev/vulnerability/CVE-2017-18486 · Aviso do Fabricante
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18486 · Nota de Segurança
• https://trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day · Nota