PT-2020-16331 · Tangro · Tangro Business Workflow

Published 2020-12-18 · Updated 2020-12-21 · CVE-2020-26176

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions tangro Business Workflow versions prior to 1.18.1

Description An issue exists where no or broken access control checks are in place on the "/api/document//attachments" API endpoint. This allows an attacker, knowing a document ID, to list all attachments of a workitem, including their respective IDs, potentially gathering valid attachment IDs for workitems that do not belong to them.

Recommendations For versions prior to 1.18.1, update to version 1.18.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/document//attachments" API endpoint to minimize the risk of exploitation.

Exploit

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2020-26176

Affected Products

Tangro Business Workflow

References · 4

• 🔥 https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-26176 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26176 · Vendor Advisory
• https://tangro.de · Note