PT-2024-22245 · Kiteworks · Kiteworks Totemomail

Delphine Peter + 1 · Published 2024-05-18 · Updated 2024-09-06 · CVE-2024-28064

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks Totemomail versions 7.x through 8.2.1

Description The issue allows for directory traversal, enabling unauthenticated file read and delete operations, as well as write operations, through the /responsiveUI/EnvelopeOpenServlet endpoint, specifically with the messageId parameter, and the displayLoginChunkedImages and storeLoginChunkedImages variables.

Recommendations For Kiteworks Totemomail versions 7.x through 8.2.1, update to version 8.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /responsiveUI/EnvelopeOpenServlet endpoint until a patch is available. Avoid using the messageId parameter in the affected endpoint until the issue is resolved. Restrict the use of displayLoginChunkedImages and storeLoginChunkedImages variables to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-26

Related Identifiers

CVE-2024-28064

Affected Products

Kiteworks Totemomail

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-28064 · Security Note
• https://t.me/pentestingnews/47335 · Telegram Post
• https://twitter.com/k4nfr3/status/1792855181324960043 · Twitter Post
• https://t.me/cvenotify/93619 · Telegram Post
• https://objectif-securite.ch/advisories/totemomail-path-traversal.txt · Note
• https://t.me/cvenotify/80365 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1791989613432648178 · Twitter Post
• https://twitter.com/CVEnew/status/1791958884388585751 · Twitter Post