PT-2024-31785 · Opencti · Opencti

Yusukejustinnakajima · Published 2024-12-26 · Updated 2024-12-27 · CVE-2024-45805

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: OpenCTI versions prior to 6.3.0

Description: The issue arises from inadequate access control for support information, allowing general users to access data meant only for users with admin and support privileges. This is facilitated by the availability of a UUID to general users through an attached query, such as a logs query, which can then be used to access sensitive information via the endpoint http:///storage/get/support/UUID/UUID.zip.

Recommendations: For versions prior to 6.3.0, update to version 6.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the support information endpoint or limiting the availability of the UUID to prevent unauthorized access.

Exploit

Fix

Information Disclosure

Improper Authorization

Weakness Enumeration

CWE-200

CWE-285

Related Identifiers

CVE-2024-45805

GHSA-42MM-C8X3-G5Q6

PYSEC-2024-298

Affected Products

Opencti

References · 8

• 🔥 https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-42mm-c8x3-g5q6 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45805.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2024-298 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-45805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45805 · Security Note
• https://t.me/cvedetector/13700 · Telegram Post
• https://twitter.com/CVEnew/status/1872399595864560028 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1872415994636808610 · Twitter Post