PT-2023-16576 · Opennms · Meridian+1

Erik Wynter · Published 2023-08-14 · Updated 2024-03-24 · CVE-2023-0872

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenMNS Horizon versions 31.0.8 through 32.0.2 Meridian (affected versions not specified)

Description The Horizon REST API includes a "users" endpoint that is vulnerable to elevation of privilege. The solution is to upgrade to a newer version. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue.

Recommendations For OpenMNS Horizon versions 31.0.8 through 32.0.2, upgrade to Horizon 32.0.2 or newer. For Meridian, upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, or 2020.1.38. As a temporary workaround, consider restricting access to the "users" endpoint in the Horizon REST API until a patch is available.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-0872

GHSA-W5GQ-XRRP-3FXF

Affected Products

Meridian

Opennms Horizon

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opennms_horizon_authenticated_rce.rb · Exploit
• https://github.com/OpenNMS/opennms/pull/6354 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-0872 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0872 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w5gq-xrrp-3fxf · Vendor Advisory
• https://github.com/OpenNMS/opennms · Note
• https://github.com/OpenNMS/opennms/commit/e59b0ddd164cf0598ac0294d11a2d677d9e310b8 · Note
• https://twitter.com/VulmonFeeds/status/1691191262496395264 · Twitter Post
• https://twitter.com/cracbot/status/1691328942337396736 · Twitter Post
• https://twitter.com/CVEnew/status/1691142258391658505 · Twitter Post
• https://t.me/cvenotify/56435 · Telegram Post
• https://twitter.com/TechFishNews/status/1691186461666873344 · Twitter Post
• https://t.me/cibsecurity/68469 · Telegram Post
• https://twitter.com/Raj_Samani/status/1772007407713140785 · Twitter Post
• https://docs.opennms.com/horizon/32/releasenotes/changelog.html · Note