PT-2021-23007 · Snipe-It · Snipe-It

Published 2021-12-10 · Updated 2022-08-09 · CVE-2021-4089

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions snipe-it versions prior to 5.3.4

Description The issue is related to Improper Access Control. Regular users with DENY set to all models permissions can still view model information via the "/models/{id}/clone" endpoint due to no authorize('view') permission being set.

Recommendations For snipe-it versions prior to 5.3.4, update to version 5.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/models/{id}/clone" endpoint to minimize the risk of exploitation. Additionally, review and adjust the permissions for regular users to ensure they cannot view model information without proper authorization.

Exploit

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

CVE-2021-4089

GHSA-9VWF-54M9-GC4F

Affected Products

Snipe-It

References · 7

• 🔥 https://huntr.dev/bounties/19453ef1-4d77-4cff-b7e8-1bc8f3af0862 · Exploit
• https://github.com/snipe/snipe-it/commit/1699c09758e56f740437674a8d6ba36443399f24 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-4089 · Security Note
• https://osv.dev/vulnerability/GHSA-9vwf-54m9-gc4f · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4089 · Vendor Advisory
• https://github.com/snipe/snipe-it · Note
• https://t.me/cibsecurity/33758 · Telegram Post