StashCat Logout improper authorization

Summaryinfo

A vulnerability classified as problematic has been found in StashCat. Affected is an unknown function of the component Logout. This manipulation causes improper authorization. The identification of this vulnerability is CVE-2017-11135. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability has been found in StashCat (version now known) and classified as problematic. Affected by this vulnerability is some unknown processing of the component Logout. The manipulation with an unknown input leads to a improper authorization vulnerability. The CWE definition for the vulnerability is CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. As an impact it is known to affect availability. The summary by CVE is:

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software, in the sense that the StashCat client side has no secure way to signal that it is ending a session and that data should be deleted.

The bug was discovered 07/31/2017. The weakness was shared 08/01/2017 (Website). It is possible to read the advisory at seclists.org. This vulnerability is known as CVE-2017-11135 since 07/09/2017. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1548.002 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-104713, VDB-104714, VDB-104715 and VDB-104716 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• StashCat

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion