PT-2019-8421 · Jitbit · Jitbit Helpdesk

Published 2019-08-09 · Updated 2019-08-19 · CVE-2017-18486

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jitbit Helpdesk versions prior to 9.0.3

Description The issue allows remote attackers to escalate privileges due to mishandling of the userHash parameter in the User/AutoLogin functionality. By inspecting the token value provided in a password reset link, a user can recover the shared secret used by the server for remote authentication. This shared secret can be used to forge new tokens for any user, allowing automatic login as the affected user.

Recommendations For versions prior to 9.0.3, update to version 9.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the password reset functionality to minimize the risk of exploitation. Avoid using the userHash parameter in the affected User/AutoLogin functionality until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-332

Related Identifiers

CVE-2017-18486

Affected Products

Jitbit Helpdesk

References · 6

• 🔥 https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass · Exploit
• 🔥 https://exploit-db.com/exploits/42776 · Exploit
• https://osv.dev/vulnerability/CVE-2017-18486 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18486 · Security Note
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html · Note
• https://trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day · Note