PT-2024-39948 · WordPress · Watchtowerhq

István Márton · Published 2024-10-26 · Updated 2024-10-28 · CVE-2024-9933

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WatchTowerHQ plugin for WordPress versions up to, and including, 3.9.6

Description The issue is related to authentication bypass. This is due to the watchtower ota token default value being empty and the missing not empty check in the Password Less Access::login function. This allows unauthenticated attackers to log in to the WatchTowerHQ client administrator user.

Recommendations For versions up to, and including, 3.9.6, consider disabling the Password Less Access::login function until a patch is available to prevent unauthenticated access. Restrict access to the WatchTowerHQ plugin to minimize the risk of exploitation. Avoid using the default watchtower ota token value in the affected login functionality until the issue is resolved.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-9933

Affected Products

Watchtowerhq

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-9933 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/50349086-e7b0-4f73-8722-1367cc05180e?source=cve · Note
• https://t.me/latest_high_impact_cve/1390 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3177064/watchtowerhq#file2 · Note
• https://plugins.trac.wordpress.org/browser/watchtowerhq/tags/3.9.6/src/Password_Less_Access.php#L56 · Note
• https://t.me/cvedetector/9002 · Telegram Post