PT-2023-18850 · Connectwise · Connectwise Automate

L00Neyhacker · Published 2023-02-01 · Updated 2024-08-02 · CVE-2023-23130

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Connectwise Automate version 2022.11

Description The issue concerns cleartext authentication, where authentication is performed via HTTP with SSL disabled. This is reportedly controlled by a configuration option, allowing customers to choose HTTP over HTTPS during troubleshooting. The vendor considers this behavior to be by design.

Recommendations For Connectwise Automate version 2022.11, consider enabling SSL to encrypt authentication data and minimize the risk of cleartext authentication exploitation. As a temporary workaround, restrict the use of HTTP for authentication until a more secure configuration can be implemented.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2023-23130

Affected Products

Connectwise Automate

References · 8

• 🔥 https://github.com/l00neyhacker/CVE-2023-23130 · Exploit
• https://osv.dev/vulnerability/CVE-2023-23130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23130 · Security Note
• https://t.me/cvenotify/88517 · Telegram Post
• https://t.me/cibsecurity/57294 · Telegram Post
• https://t.me/cvenotify/43298 · Telegram Post
• https://t.me/cvenotify/43934 · Telegram Post
• https://t.me/cvenotify/43519 · Telegram Post