PT-2023-20435 · Unknown+2 · Zoneminder+2

Published 2023-02-25 · Updated 2023-11-30 · CVE-2023-26032

Positive Technologies (AI Summary)

CVSS v3.1

8.9

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.36.33 and 1.37.33

Description The issue concerns SQL Injection via a malicious JSON web token. The Username field of the JWT token was trusted when performing an SQL query to load the user. If an attacker could determine the HASH key used by ZoneMinder, they could generate a malicious JWT token and use it to execute arbitrary SQL.

Recommendations To resolve the issue, update to version 1.36.33 or 1.37.33, as these versions contain the fix for the SQL Injection vulnerability. As a temporary workaround, consider restricting access to the JWT token generation and validation process until the update is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2023-1939

ALT-PU-2023-2056

ALT-PU-2023-4121

ALT-PU-2023-7284

CVE-2023-26032

GHSA-6C72-Q9MW-MWX9

Affected Products

Alt Linux

Debian

Zoneminder

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26032.json · Exploit
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-6c72-q9mw-mwx9 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-26032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26032 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-26032 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-26032 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-26032 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26032 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-26032 · Vendor Advisory