PT-2023-20435 · Unknown+2 · Zoneminder+2

Publicado 2023-02-25 · Atualizado 2023-11-30 · CVE-2023-26032

Positive Technologies (AI Summary)

CVSS v3.1

8.9

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.36.33 and 1.37.33

Description The issue concerns SQL Injection via a malicious JSON web token. The Username field of the JWT token was trusted when performing an SQL query to load the user. If an attacker could determine the HASH key used by ZoneMinder, they could generate a malicious JWT token and use it to execute arbitrary SQL.

Recommendations To resolve the issue, update to version 1.36.33 or 1.37.33, as these versions contain the fix for the SQL Injection vulnerability. As a temporary workaround, consider restricting access to the JWT token generation and validation process until the update is applied.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

ALT-PU-2023-1939

ALT-PU-2023-2056

ALT-PU-2023-4121

ALT-PU-2023-7284

CVE-2023-26032

GHSA-6C72-Q9MW-MWX9

Produtos afetados

Alt Linux

Debian

Zoneminder

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26032.json · Exploit
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-6c72-q9mw-mwx9 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-26032 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-26032 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-26032 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-26032 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2023-26032 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-26032 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-26032 · Aviso do Fabricante