PT-2021-19460 · Gestsup · Gestsup

Marcelo Ardiles · Published 2021-04-26 · Updated 2021-05-04 · CVE-2021-31646

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gestsup versions prior to 3.2.10

Description The issue allows for account takeover through the password recovery functionality remotely. It is caused by a weak algorithm used for generating password recovery tokens in the forgot pwd.php file, specifically the PHP uniqueid function. This weakness enables a brute force attack.

Recommendations For versions prior to 3.2.10, update to version 3.2.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the forgot pwd.php file to minimize the risk of exploitation. Avoid using the password recovery functionality until the issue is resolved.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2021-31646

Affected Products

Gestsup

References · 5

• https://osv.dev/vulnerability/CVE-2021-31646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31646 · Security Note
• https://gestsup.fr/index.php?page=download · Vendor Advisory
• https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&type=patch · Vendor Advisory
• https://dojo.maltem.ca/public/advisories/CVE-2021-31646.html · Note