PT-2020-12629 · Deskpro · Deskpro

Published 2020-04-01 · Updated 2021-07-21 · CVE-2020-11466

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Deskpro versions prior to 2019.8.0

Description An issue was discovered where the "/api/tickets" endpoint failed to properly validate a user's privilege. This allowed an attacker to retrieve arbitrary information about all helpdesk tickets stored in the database with numerous filters, leaking sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.

Recommendations For versions prior to 2019.8.0, update to version 2019.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/tickets" endpoint to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-11466

Affected Products

Deskpro

References · 6

• 🔥 https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11466 · Security Note
• https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11466 · Vendor Advisory
• https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update · Vendor Advisory
• https://t.me/cvenotify/2348 · Telegram Post