PT-2023-29297 · Dromara+1 · Dromara Satoken+1

M4Ra7H0N · Published 2023-10-13 · Updated 2024-09-12 · CVE-2023-44794

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dromara SaToken versions 1.36.0 and earlier IBM Sterling Connect Direct Web Services versions 6.0, 6.1.0, 6.2.0, 6.3.0 IBM Sterling Connect Direct Web Services (Certified Container) versions All

Description An issue allows a remote attacker to escalate privileges via a crafted payload to the URL.

Recommendations For Dromara SaToken versions 1.36.0 and earlier, update to a version later than 1.36.0. For IBM Sterling Connect Direct Web Services versions 6.0, 6.1.0, 6.2.0, 6.3.0, apply the recommended fix from IBM. For IBM Sterling Connect Direct Web Services (Certified Container) versions All, apply the recommended fix from IBM.

Exploit

Fix

Improper Preservation of Permissions

Improper Access Control

Weakness Enumeration

CWE-281

CWE-284

Related Identifiers

CVE-2023-44794

GHSA-54F6-9MX9-86F7

Affected Products

Dromara Satoken

Ibm Sterling Connect:Direct Web Services

References · 12

• 🔥 https://github.com/dromara/Sa-Token/issues/515 · Exploit
• https://osv.dev/vulnerability/GHSA-54f6-9mx9-86f7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44794 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44794 · Vendor Advisory
• https://github.com/dromara/Sa-Token · Note
• https://github.com/dromara/Sa-Token/commit/954efeb73277f924f836da2a25322ea35ee1bfa3 · Note
• https://twitter.com/VulmonFeeds/status/1713038577888575947 · Twitter Post
• https://twitter.com/CVEnew/status/1717056728578269691 · Twitter Post
• https://t.me/cibsecurity/72869 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1713038324787449975 · Twitter Post
• https://t.me/cvenotify/60252 · Telegram Post
• https://twitter.com/bluepatch0404/status/1788250320801505454 · Twitter Post