42Gears SureMDM up to 6.31 on Windows User Information information exposure

Summaryinfo

A vulnerability has been found in 42Gears SureMDM up to 6.31 on Windows and classified as problematic. The affected element is an unknown function of the component User Information Handler. Performing a manipulation results in information exposure. This vulnerability is cataloged as CVE-2023-3897. The attack must be initiated from a local position. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability was found in 42Gears SureMDM up to 6.31 on Windows. It has been classified as problematic. This affects an unknown part of the component User Information Handler. The manipulation with an unknown input leads to a information exposure vulnerability. CWE is classifying the issue as CWE-203. The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. This is going to have an impact on confidentiality. The summary by CVE is:

User enumeration in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.This issue affects SureMDM On-premise: 6.31 and below version 

The weakness was shared 07/25/2023. This vulnerability is uniquely identified as CVE-2023-3897 since 07/25/2023. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (51804). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• 42Gears

Name

• SureMDM

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.6
• 6.7
• 6.8
• 6.9
• 6.10
• 6.11
• 6.12
• 6.13
• 6.14
• 6.15
• 6.16
• 6.17
• 6.18
• 6.19
• 6.20
• 6.21
• 6.22
• 6.23
• 6.24
• 6.25
• 6.26
• 6.27
• 6.28
• 6.29
• 6.30
• 6.31

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion