Battelle V2I Hub 2.5.1 SystemConfigActions.php?action=add parameterName/_login_username cross site scripting

Summaryinfo

A vulnerability classified as problematic has been found in Battelle V2I Hub 2.5.1. Impacted is an unknown function of the file api/SystemConfigActions.php?action=add. Performing a manipulation of the argument parameterName/_login_username results in cross site scripting. This vulnerability was named CVE-2018-1000629. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in Battelle V2I Hub 2.5.1. It has been classified as problematic. This affects some unknown processing of the file api/SystemConfigActions.php?action=add. The manipulation of the argument parameterName/_login_username with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. The summary by CVE is:

Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

The bug was discovered 08/09/2018. The weakness was presented 12/28/2018 (Website). It is possible to read the advisory at exchange.xforce.ibmcloud.com. This vulnerability is uniquely identified as CVE-2018-1000629 since 08/01/2018. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 141 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-128459, VDB-128465, VDB-128464 and VDB-128462 for similar entries. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Battelle

Name

• V2I Hub

Version

• 2.5.1

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion