Tribal Systems Zenario CMS 9.3.57595 Remember Me weak authentication

W Tribal Systems Zenario CMS 9.3.57595 została stwierdzona podatność. Problemem dotknięta jest nieznana funkcja w komponencie Remember Me Handler. Poprzez manipulację przy użyciu nieznanych danych wejściowych można doprowadzić do wystąpienia podatności słabe uwierzytelnianie. Raport na temat podatności został udostępniony pod adresem github.com. Identyfikatorem tej podatności jest CVE-2022-4231. Atak może zostać przeprowadzony zdalnie. Uważa się go za proof-of-concept. Exploit można ściągnąć pod adresem github.com. Potencjalne zabezpieczenie zostało opublikowane jeszcze przed po ujawnieniu podatności.

Pole2022-12-22 08:342022-12-24 18:292022-12-24 18:35
vendorTribal SystemsTribal SystemsTribal Systems
nameZenario CMSZenario CMSZenario CMS
version9.3.575959.3.575959.3.57595
componentRemember Me HandlerRemember Me HandlerRemember Me Handler
cwe384 (słabe uwierzytelnianie)384 (słabe uwierzytelnianie)384 (słabe uwierzytelnianie)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acHHH
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
urlhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixationhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixationhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixation
availability111
publicity111
urlhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixationhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixationhttps://github.com/lithonn/bug-report/tree/main/vendors/tribalsystems/zenario/session-fixation
cveCVE-2022-4231CVE-2022-4231CVE-2022-4231
responsibleVulDBVulDBVulDB
date1669762800 (2022-11-30)1669762800 (2022-11-30)1669762800 (2022-11-30)
typeContent Management SystemContent Management SystemContent Management System
cvss2_vuldb_avNNN
cvss2_vuldb_acHHH
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore4.04.04.0
cvss2_vuldb_tempscore3.43.43.4
cvss3_vuldb_basescore4.24.24.2
cvss3_vuldb_tempscore3.83.83.8
cvss3_meta_basescore4.24.24.6
cvss3_meta_tempscore3.83.84.5
price_0day$0-$5k$0-$5k$0-$5k
person_nameNgo Van TuNgo Van TuNgo Van Tu
developer_nameNgo Van TuNgo Van TuNgo Van Tu
company_nameCMC TSSGCMC TSSGCMC TSSG
cve_assigned1669762800 (2022-11-30)1669762800 (2022-11-30)
cve_nvd_summaryA vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiR
cvss3_nvd_sU
cvss3_nvd_cL
cvss3_nvd_iL
cvss3_nvd_aN
cvss3_cna_avN
cvss3_cna_acH
cvss3_cna_prN
cvss3_cna_uiR
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aN
cve_cnaVulDB
cvss3_nvd_basescore5.4
cvss3_cna_basescore4.2

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!