| Title | 1024-lab smart-admin v3.30.0 Improper Access Controls |
|---|
| Description | The /support/config/queryByKey endpoint of the system only validates the login state and performs no authorization check (Improper Access Control). Any authenticated
low-privileged user can pass configKey=super_password to read the system's master/super password in plaintext. In the login logic this password is compared in plaintext, and once
matched, password hash verification and 2FA are skipped. An attacker can thereby take over any account, including the super administrator. |
|---|
| User | s1mple_xy (UID 82894) |
|---|
| Submission | 09/23/2026 12:31 (1 month ago) |
|---|
| Moderation | 10/11/2026 19:43 (18 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 416747 [1024-lab smart-admin up to 3.30.0 Support Config Query queryByKey configKey access control] |
|---|
| Points | 20 |
|---|