PT-2021-11153 · Unknown · Sapphireims

Tanoy Bose · Published 2021-08-11 · Updated 2022-07-12 · CVE-2020-25566

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0

Description: The issue allows for account takeover by sending a request to the "Save Password" form. This can be done without requiring a JSESSIONID, enabling the reset of any user's password by modifying the username to the target user and the password to base64 encoded desired password.

Recommendations: For SapphireIMS version 5.0, as a temporary workaround, consider restricting access to the Save Password form until a patch is available. Avoid using the Save Password form to reset passwords until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-25566

Affected Products

Sapphireims

References · 4

• 🔥 https://vuln.shellcoder.party/2020/09/19/cve-2020-25566-sapphireims-unauthenticated-account-takeover · Exploit
• 🔥 https://vuln.shellcoder.party/tags/sapphireims · Exploit
• https://osv.dev/vulnerability/CVE-2020-25566 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25566 · Security Note