PT-2024-18172 · Nt Ware+1 · Uniflow Online+1

Published 2024-09-02 · Updated 2024-09-17 · CVE-2024-1621

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions uniFLOW Online versions prior to and including 2024.1.0

Description The registration process of uniFLOW Online apps can be compromised when email login is enabled on the tenant, particularly for those utilizing email login in combination with Microsoft Safe Links or similar. This issue may allow an attacker to register themselves against a genuine user in the system, granting malicious users similar access and capabilities via the app to the existing genuine user.

Recommendations For versions prior to and including 2024.1.0, consider disabling email login on the tenant until a patch is available. Restrict access to the registration process to minimize the risk of exploitation. Avoid using email login in combination with Microsoft Safe Links or similar until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2024-1621

Affected Products

Safe Links

Uniflow Online

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2024-1621 · Security Note
• https://canon-europe.com/psirt/advisory-information · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-1621 · Vendor Advisory
• https://ntware.atlassian.net/wiki/spaces/SA/pages/12113215492/2024+Security+Advisory+Device+registration+susceptible+to+compromise · Vendor Advisory
• https://twitter.com/transilienceai/status/1831794319876886932 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1830742554863686115 · Twitter Post
• https://twitter.com/transilienceai/status/1831794297315979396 · Twitter Post
• https://t.me/cvedetector/4660 · Telegram Post
• https://twitter.com/transilienceai/status/1831794303066091923 · Twitter Post
• https://twitter.com/transilienceai/status/1831794313547936056 · Twitter Post
• https://t.me/cvenotify/93017 · Telegram Post
• https://twitter.com/CVEnew/status/1830701575452467612 · Twitter Post
• https://twitter.com/transilienceai/status/1831794309387186541 · Twitter Post
• https://twitter.com/CveFindCom/status/1830697524975304958 · Twitter Post