CVE-2017-18486 Weak cryptography in n/a
Attackers can escalate privileges and take over accounts by exploiting a weak PRNG to forge authentication tokens in Jitbit Helpdesk.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-18486?
CVE-2017-18486 is a high-severity vulnerability in n/a, published on 9 Aug 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
Weakness: CWE-332
Which versions are affected by CVE-2017-18486?
It affects 1 product.
Products include Jitbit Helpdesk.
How do I fix CVE-2017-18486?
No fix has been published for CVE-2017-18486 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-18486 being exploited?
There is no known exploitation of CVE-2017-18486 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-xp26-jqrv-cc5r.