Kurmi Provisioning Suite 7.9.0.33 Header X-Forwarded-For insufficient logging

Summaryinfo

A vulnerability classified as critical was found in Kurmi Provisioning Suite 7.9.0.33. This affects an unknown part of the component Header Handler. The manipulation of the argument X-Forwarded-For results in insufficient logging. This vulnerability is reported as CVE-2024-54450. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, was found in Kurmi Provisioning Suite 7.9.0.33. Affected is an unknown function of the component Header Handler. The manipulation of the argument X-Forwarded-For with an unknown input leads to a insufficient logging vulnerability. CWE is classifying the issue as CWE-778. When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it. This is going to have an impact on integrity. CVE summarizes:

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the (possibly forged) IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP address can later be displayed in the My Account popup that shows the IP address that was used to log in.

The advisory is shared for download at kurmi-software.com. This vulnerability is traded as CVE-2024-54450 since 12/02/2024. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 06/21/2025). The MITRE ATT&CK project declares the attack technique as T1562.002.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-52564). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Kurmi

Name

• Provisioning Suite

Version

• 7.9.0.33

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion