WillyXJ facileManager up to 4.5.0 POST Request processPost.php authorization

Summaryinfo

A vulnerability was found in WillyXJ facileManager up to 4.5.0. It has been declared as very critical. This affects an unknown function of the file server/fm-modules/facileManager/ajax/processPost.php of the component POST Request Handler. Such manipulation leads to authorization. This vulnerability is traded as CVE-2024-24573. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in WillyXJ facileManager up to 4.5.0. Affected by this issue is some unknown processing of the file server/fm-modules/facileManager/ajax/processPost.php of the component POST Request Handler. The manipulation with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-863. The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. Impacted is confidentiality, integrity, and availability. CVE summarizes:

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can arbitrarily set their permissions and grant their non-admin accounts with super user privileges.

The weakness was shared 02/01/2024 as GHSA-w67q-pp62-j4pf. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2024-24573 since 01/25/2024. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/01/2024).

By approaching the search of inurl:server/fm-modules/facileManager/ajax/processPost.php it is possible to find vulnerable targets with Google Hacking.

Applying the patch 0aa850d4b518f10143a4c675142b15caa5872877 is able to eliminate this problem. The bugfix is ready for download at github.com.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• WillyXJ

Name

• facileManager

Version

• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5.0

License

• open-source

Website

• Product: https://github.com/WillyXJ/facileManager/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion