PT-2023-16576 · Opennms · Meridian+1

Erik Wynter · Publicado 2023-08-14 · Atualizado 2024-03-24 · CVE-2023-0872

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenMNS Horizon versions 31.0.8 through 32.0.2 Meridian (affected versions not specified)

Description The Horizon REST API includes a "users" endpoint that is vulnerable to elevation of privilege. The solution is to upgrade to a newer version. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue.

Recommendations For OpenMNS Horizon versions 31.0.8 through 32.0.2, upgrade to Horizon 32.0.2 or newer. For Meridian, upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, or 2020.1.38. As a temporary workaround, consider restricting access to the "users" endpoint in the Horizon REST API until a patch is available.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-0872

GHSA-W5GQ-XRRP-3FXF

Produtos afetados

Meridian

Opennms Horizon

Referências · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opennms_horizon_authenticated_rce.rb · Exploit
• https://github.com/OpenNMS/opennms · Nota
• https://github.com/OpenNMS/opennms/pull/6354 · Correção
• https://github.com/OpenNMS/opennms/commit/e59b0ddd164cf0598ac0294d11a2d677d9e310b8 · Nota
• https://twitter.com/VulmonFeeds/status/1691191262496395264 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-0872 · Nota de Segurança
• https://twitter.com/cracbot/status/1691328942337396736 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1691142258391658505 · Publicação no Twitter
• https://t.me/cvenotify/56435 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-0872 · Aviso do Fabricante
• https://twitter.com/TechFishNews/status/1691186461666873344 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-w5gq-xrrp-3fxf · Aviso do Fabricante
• https://t.me/cibsecurity/68469 · Publicação no Telegram
• https://twitter.com/Raj_Samani/status/1772007407713140785 · Publicação no Twitter
• https://docs.opennms.com/horizon/32/releasenotes/changelog.html · Nota