PT-2022-20394 · Unknown · B2Evolution

Msc-Secura · Published 2022-09-28 · Updated 2022-09-30 · CVE-2022-30935

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 7.2.3

Description An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the use of a bad randomness function. This allows the attacker to get valid sessions for arbitrary users, and optionally reset their password.

Recommendations For versions prior to 7.2.3, update to a version that includes a fix for the bad randomness function used in password reset tokens. As a temporary workaround, consider restricting access to the password reset functionality until a patch is available.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2022-30935

Affected Products

B2Evolution

References · 6

• https://github.com/b2evolution/b2evolution/blob/master/inc/_core/_misc.funcs.php#L5955 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-30935 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30935 · Vendor Advisory
• https://b2evolution.net/downloads/7-2-5-stable · Vendor Advisory
• https://github.com/b2evolution/b2evolution/issues/114 · Note
• https://t.me/cvenotify/36908 · Telegram Post