Helpdesk Pro Plugin up to 1.3.x on Joomla /component/helpdeskpro/ ID information disclosure

Summaryinfo

A vulnerability categorized as problematic has been discovered in Helpdesk Pro Plugin up to 1.3.x on Joomla. This affects an unknown function of the file /component/helpdeskpro/. The manipulation of the argument ID results in information disclosure. This vulnerability was named CVE-2015-4071. The attack may be performed from remote. In addition, an exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in Helpdesk Pro Plugin up to 1.3.x on Joomla (Joomla Component). Affected is an unknown functionality of the file /component/helpdeskpro/. The manipulation of the argument id with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.

The bug was discovered 07/21/2015. The weakness was presented 08/18/2017 by Gregor Mynarsky, Kristian Varnai and Simon Rawet as EDB-ID 37666 as not defined exploit (Exploit-DB). The advisory is available at exploit-db.com. This vulnerability is traded as CVE-2015-4071 since 05/22/2015. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details and a public exploit are known. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.

A public exploit has been developed by Simon Rawet and been published even before and not after the advisory. The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 759 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 1.4.0 eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (37666) and SecurityFocus (BID 75971†). See VDB-106861, VDB-106862, VDB-106863 and VDB-106864 for similar entries. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Joomla Component

Name

• Helpdesk Pro Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion