PT-2022-17700 · Cherwell · Cherwell Service Management

L00Neyhacker · Published 2022-02-28 · Updated 2023-08-08 · CVE-2022-26157

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cherwell Service Management version 10.2.3

Description An issue was discovered in the web application where the ASP.NET Sessionid cookie is not protected by the Secure flag, making it prone to interception by an attacker if traffic is sent over unencrypted channels.

Recommendations For Cherwell Service Management version 10.2.3, consider configuring the web application to protect the ASP.NET Sessionid cookie with the Secure flag to prevent interception over unencrypted channels. As a temporary workaround, restrict access to unencrypted channels to minimize the risk of exploitation.

Exploit

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2022-26157

Affected Products

Cherwell Service Management

References · 6

• 🔥 https://github.com/l00neyhacker/CVE-2022-26157 · Exploit
• https://osv.dev/vulnerability/CVE-2022-26157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26157 · Security Note
• https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html · Vendor Advisory
• https://t.me/cibsecurity/38181 · Telegram Post
• https://t.me/cvenotify/27913 · Telegram Post