PT-2024-26859 · Unknown · Silverpeas

Chris Pritchard · Published 2024-06-03 · Updated 2025-07-20 · CVE-2024-36042

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Silverpeas versions prior to 6.3.5

Description The issue allows authentication bypass by omitting the Password field to AuthenticationServlet, potentially providing an unauthenticated user with superadmin access. This has been exploited in real-world incidents to gain access and escalate privileges.

Recommendations For versions prior to 6.3.5, update to version 6.3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the AuthenticationServlet to minimize the risk of exploitation.

Exploit

Fix

LPE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-36042

GHSA-4W54-WWC9-X62C

Affected Products

Silverpeas

References · 13

• 🔥 https://gist.github.com/ChrisPritchard/4b6d5c70d9329ef116266a6c238dcb2d · Exploit
• https://osv.dev/vulnerability/CVE-2024-36042 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4w54-wwc9-x62c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36042 · Security Note
• https://github.com/Silverpeas/Silverpeas-Core · Note
• https://github.com/Silverpeas/Silverpeas-Core/commit/11fb5e21c252ce4751b85fccf5b8076156e0b4f0 · Note
• https://github.com/Silverpeas/Silverpeas-Core/tags · Note
• https://twitter.com/shrisec/status/1944892509211255133 · Twitter Post
• https://twitter.com/yourstruelyyash/status/1887222549672829428 · Twitter Post
• https://silverpeas.org · Note
• https://twitter.com/shrisec/status/1946861579519344753 · Twitter Post
• https://twitter.com/David_Uton/status/1880908086325674338 · Twitter Post
• https://t.me/cvenotify/81708 · Telegram Post