PT-2020-20134 · Jenzabar · Jenzabar Jics

Published 2020-05-19 · Updated 2020-05-27 · CVE-2020-8434

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenzabar JICS versions prior to 9.0.1 Patch 3 Jenzabar JICS versions 9.1 prior to 9.1.2 Patch 2 Jenzabar JICS versions 9.2 prior to 9.2.2 Patch 8

Description The issue allows an attacker to impersonate any real user in the JICS database without authenticating. This is possible because session cookies are a deterministic function of the username and a hard-coded password is used to encrypt the username. By knowing the key and algorithm, an attacker can select any username, encrypt it, and save it in their browser to impersonate the user.

Recommendations For versions prior to 9.0.1 Patch 3, update to 9.0.1 Patch 3 or later. For versions 9.1 prior to 9.1.2 Patch 2, update to 9.1.2 Patch 2 or later. For versions 9.2 prior to 9.2.2 Patch 8, update to 9.2.2 Patch 8 or later.

Exploit

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2020-8434

Affected Products

Jenzabar Jics

References · 4

• 🔥 https://medium.com/@mdavis332/higher-ed-erp-portal-vulnerability-auth-bypass-to-login-any-account-f1aeef438f80 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8434 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8434 · Vendor Advisory
• https://medium.com/%40mdavis332/higher-ed-erp-portal-vulnerability-auth-bypass-to-login-any-account-f1aeef438f80 · Note