PT-2022-10515 · Unknown · Veryfitpro

Martinfrancois · Published 2022-04-25 · Updated 2024-02-14 · CVE-2021-36460

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VeryFitPro version 3.2.8

Description The issue allows an attacker in possession of a hashed password to take over a user's account. This is because the password is hashed locally on the device and the hash is used for authentication with the backend API, including for login, registration, and password changes. This renders the benefits of storing hashed passwords in the database useless.

Recommendations For version 3.2.8, consider disabling the local password hashing mechanism until a patch is available, and restrict access to the backend API to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-36460

Affected Products

Veryfitpro

References · 6

• 🔥 https://github.com/martinfrancois/CVE-2021-36460 · Exploit
• https://osv.dev/vulnerability/CVE-2021-36460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36460 · Security Note
• http://veryfitpro.com · Note
• http://i-doo.cn · Note
• https://t.me/cibsecurity/41379 · Telegram Post