PT-2020-13704 · Hivemq · Hivemq Broker Control Center

Arun Magesh · Published 2020-08-26 · Updated 2020-12-23 · CVE-2020-13821

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HiveMQ Broker Control Center version 4.3.2

Description An issue was discovered where a crafted clientid parameter in an MQTT packet sent to the Broker is reflected in the client section of the management console. This reflection can lead to the loading of an attacker's JavaScript in a browser, potentially resulting in the theft of the session and cookie of the administrator's account of the Broker.

Recommendations For HiveMQ Broker Control Center version 4.3.2, consider restricting access to the management console to minimize the risk of exploitation. As a temporary workaround, avoid using the clientid parameter in MQTT packets until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-13821

Affected Products

Hivemq Broker Control Center

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-13821 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13821 · Vendor Advisory
• https://hivemq.com/blog/hivemq-4-3-3-released · Vendor Advisory
• https://payatu.com/advisory/hivemq-mqtt-broker---xss-over-mqtt · Note
• https://t.me/cvenotify/7494 · Telegram Post