PT-2019-15027 · Bludit · Bludit

Rastating · Published 2019-10-06 · Updated 2021-06-15 · CVE-2019-17240

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bludit versions 3.2.9 through 3.9.2

Description The issue allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers. This can be exploited by sending requests with varying X-Forwarded-For or Client-IP headers to the affected system.

Recommendations For versions 3.2.9 through 3.9.2, consider temporarily disabling the authentication mechanism that relies on the X-Forwarded-For or Client-IP headers until a patch is available. Restrict access to the security.class.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2019-17240

Affected Products

Bludit

References · 13

• 🔥 https://github.com/bludit/bludit/pull/1090 · Exploit
• 🔥 https://github.com/pingport80/CVE-2019-17240 · Exploit
• 🔥 https://exploit-db.com/exploits/48942 · Exploit
• 🔥 https://rastating.github.io/bludit-brute-force-mitigation-bypass · Exploit
• 🔥 https://exploit-db.com/exploits/48746 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17240 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17240 · Vendor Advisory
• https://t.me/pentestingnews/5216 · Telegram Post
• https://t.me/defcon_news/78642 · Telegram Post
• http://packetstormsecurity.com/files/159664/Bludit-3.9.2-Bruteforce-Mitigation-Bypass.html · Note
• http://packetstormsecurity.com/files/158875/Bludit-3.9.2-Authentication-Bruteforce-Mitigation-Bypass.html · Note
• https://t.me/rnetsec/15136 · Telegram Post
• https://t.me/rnetsec/13113 · Telegram Post