PT-2024-31386 · Tophat · Tophat

Published 2024-08-26 · Updated 2024-08-27 · CVE-2024-45036

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tophat versions prior to 1.10.0

Description The issue is related to an Improper Access Control vulnerability that can expose the TOPHAT APP TOKEN token stored in ~/.tophatrc through the use of a malicious Tophat URL controlled by the attacker. This token can then be used to access internal build artifacts for mobile applications that are not intended to be public. The vulnerability allows Tophat to send this token to the attacker's server without any checks to ensure that the server is trusted.

Recommendations For versions prior to 1.10.0, update to version 1.10.0 or later as soon as possible, as there are no workarounds for this issue. Systems that have implemented the Tophat API endpoint for requesting artifacts should cease use and invalidate the token immediately.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-45036

GHSA-P7XH-6HJR-MMG6

Affected Products

Tophat

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45036.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-45036 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45036 · Vendor Advisory
• https://github.com/Shopify/tophat/security/advisories/GHSA-p7xh-6hjr-mmg6 · Note
• https://github.com/Shopify/tophat/pull/10 · Note
• https://twitter.com/VulmonFeeds/status/1828231735277982126 · Twitter Post
• https://t.me/cvenotify/92236 · Telegram Post
• https://t.me/cvedetector/4224 · Telegram Post
• https://twitter.com/CVEnew/status/1828203610108199075 · Twitter Post