PT-2022-16965 · Tuleap · Tuleap

Lorentz Romain + 1 · Published 2022-06-06 · Updated 2022-06-15 · CVE-2022-24896

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap versions prior to 13.7.99.239

Description The issue arises from improper authorization verification when displaying the content of tracker report renderer and chart widgets. This allows malicious users to retrieve the name of a tracker they cannot access, as well as the names of fields used in reports.

Recommendations For versions prior to 13.7.99.239, update to version 13.7.99.239 or later to resolve the issue. As a temporary workaround, consider restricting access to the tracker report renderer and chart widgets to minimize the risk of exploitation.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-24896

GHSA-X962-X43G-QW39

Affected Products

Tuleap

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24896.json · Exploit
• https://github.com/Enalean/tuleap/security/advisories/GHSA-x962-x43g-qw39 · Patch
• https://github.com/Enalean/tuleap/commit/8e99e7c82d9fe569799019b9e1d614d38a184313 · Patch
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=8e99e7c82d9fe569799019b9e1d614d38a184313 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24896 · Security Note
• https://tuleap.net/plugins/tracker/?aid=26729 · Vendor Advisory
• https://t.me/cvenotify/31344 · Telegram Post
• https://t.me/cvenotify/31340 · Telegram Post
• https://t.me/cibsecurity/44078 · Telegram Post