CVE-2017-14487 Auth bypass in n/a
Attackers can impersonate users by sniffing network traffic and modifying local authentication tokens in the OhMiBod Remote mobile app.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14487?
CVE-2017-14487 is a critical authentication bypass vulnerability in n/a, published on 1 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The OhMiBod Remote app for Android and iOS allows remote attackers to impersonate users by sniffing network traffic for search responses from the OhMiBod API server and then editing the username, user_id, and token fields in data/data/com.ohmibod.remote2/shared_prefs/OMB.xml.
Weakness: CWE-290
Which versions are affected by CVE-2017-14487?
It affects 1 product.
Products include Ohmibod Ohmibod Remote.
How do I fix CVE-2017-14487?
No fix has been published for CVE-2017-14487 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-14487 being exploited?
There is no known exploitation of CVE-2017-14487 in the wild and no public exploit code.
Sources
Also known as GHSA-qv8j-45v4-24pj.