PT-2017-2604 · U.Motion · U.Motion Builder

Published 2017-06-27 · Updated 2017-09-27 · CVE-2017-9956

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions U.motion Builder versions 1.2.1 and prior

Description The issue is caused by the use of a hard-coded valid session ID in the system. This allows a remote attacker to bypass the authentication procedure by using a specially crafted user cookie that includes the valid session ID. The attacker can exploit this to gain unauthorized access.

Recommendations For versions 1.2.1 and prior, consider disabling the use of session IDs in HTTP cookies as a temporary workaround until a patch is available. Restrict access to the system to minimize the risk of exploitation. Avoid using the hard-coded session ID in web requests until the issue is resolved.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-547

Related Identifiers

BDU:2017-01822

CVE-2017-9956

Affected Products

U.Motion Builder

References · 8

• https://bdu.fstec.ru/vul/2017-01822 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9956 · Security Note
• http://schneider-electric.com/en/download/document/SEVD-2017-178-01 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-180-02 · Note
• http://securitylab.ru/vulnerability/487061.php · Note
• https://cybersecurity-help.cz/vdb/SB2017063007 · Note
• http://securityfocus.com/bid/99344 · Note