Opencast up to 7.5/8.0 Cookie improper authorization

Summaryinfo

A vulnerability classified as critical was found in Opencast up to 7.5/8.0. This impacts an unknown function of the component Cookie Handler. Such manipulation leads to improper authorization. This vulnerability is documented as CVE-2020-5206. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Opencast up to 7.5/8.0 and classified as critical. Affected by this issue is an unknown function of the component Cookie Handler. The manipulation with an unknown input leads to a improper authorization vulnerability. Using CWE to declare the problem leads to CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. Impacted is confidentiality, integrity, and availability. CVE summarizes:

In Opencast before 7.6 and 8.1, using a remember-me cookie with an arbitrary username can cause Opencast to assume proper authentication for that user even if the remember-me cookie was incorrect given that the attacked endpoint also allows anonymous access. This way, an attacker can, for example, fake a remember-me token, assume the identity of the global system administrator and request non-public content from the search service without ever providing any proper authentication. This problem is fixed in Opencast 7.6 and Opencast 8.1

The weakness was released 01/30/2020 (GitHub Repository). The advisory is shared for download at github.com. This vulnerability is handled as CVE-2020-5206 since 01/02/2020. The attack may be launched remotely. The successful exploitation requires a simple authentication. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1548.002.

Upgrading to version 7.6 or 8.1 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-149580, VDB-149579, VDB-149578 and VDB-149577. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• Opencast

Version

• 7.0
• 7.1
• 7.2
• 7.3
• 7.4
• 7.5
• 8.0

License

• open-source

Website

• Product: https://github.com/opencast/opencast/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion