PT-2018-18232 · Telexy · Telexy Qpath

Published 2018-11-08 · Updated 2019-10-03 · CVE-2018-7718

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Telexy QPath version 5.4.462

Description: A low-privileged authenticated user can modify user information, including email address, username, and password, of other user accounts by supplying a specially crafted serialized request to AdanitDataService.svc. An attacker can intercept their own password-change request and modify the username before the request reaches the server, allowing for account takeover. Similarly, changing a victim's email address can have the same consequence.

Recommendations: For Telexy QPath version 5.4.462, consider restricting access to the AdanitDataService.svc endpoint until a patch is available. As a temporary workaround, monitor and validate all requests to this endpoint to prevent unauthorized modifications to user information.

Fix

Related Identifiers

CVE-2018-7718

Affected Products

Telexy Qpath

References · 3

• https://osv.dev/vulnerability/CVE-2018-7718 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7718 · Security Note
• https://dropbox.com/s/6tlee2uj3t3su8n/Telexy-QPath-CVE-2018-7718.pdf · Note