PT-2024-37736 · Lunary · Lunary

Published 2024-09-13 · Updated 2024-11-03 · CVE-2024-6582

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary versions prior to commit 1f043d8798ad87346dfe378eea723bff78ad7433

Description A broken access control issue exists in the saml.ts file, allowing a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known.

Recommendations For versions prior to commit 1f043d8798ad87346dfe378eea723bff78ad7433, consider updating to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the saml.ts file to minimize the risk of exploitation. Avoid using the saml.ts file to update IDP settings or view SSO metadata for other organizations until the issue is resolved.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2024-6582

GHSA-W73R-8MM4-CFVF

Affected Products

Lunary

References · 10

• 🔥 https://huntr.com/bounties/251d138c-3911-4a81-96e5-5a4ab59a0b59 · Exploit
• https://github.com/lunary-ai/lunary/commit/1f043d8798ad87346dfe378eea723bff78ad7433 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-6582 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6582 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w73r-8mm4-cfvf · Vendor Advisory
• https://github.com/lunary-ai/lunary · Note
• https://twitter.com/VulmonFeeds/status/1834663038785319354 · Twitter Post
• https://t.me/cvenotify/94629 · Telegram Post
• https://t.me/cvedetector/5624 · Telegram Post
• https://twitter.com/CVEnew/status/1834633839316283586 · Twitter Post