PT-2023-27877 · Netwrix · Netwrix Usercube

Antoine Carrincazeaux + 1 · Publicado 2023-11-28 · Atualizado 2024-08-01 · CVE-2023-41264

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netwrix Usercube versions prior to 6.0.215

Description The issue allows authentication bypass on deployment endpoints, leading to privilege escalation in certain misconfigured on-premises installations. This occurs when the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret fields for the "POST /api/Deployment/ExportConfiguration" and "POST /api/Deployment" endpoints.

Recommendations For versions prior to 6.0.215, update to version 6.0.215 or later to resolve the issue. As a temporary workaround, consider configuring the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret fields to prevent authentication bypass. Restrict access to the "POST /api/Deployment/ExportConfiguration" and "POST /api/Deployment" endpoints until the issue is resolved.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-41264

Produtos afetados

Netwrix Usercube

Referências · 5

• 🔥 https://synacktiv.com/advisories/usercube-netwrix-multiple-vulnerabilities · Exploit
• https://netwrix.com/identity_governance_and_administration_solution.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-41264 · Nota de Segurança
• https://t.me/cvenotify/62167 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-41264 · Aviso do Fabricante