CVE-2021-31868 Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability

What is CVE-2021-31868?

CVE-2021-31868 is a medium-severity missing authorization vulnerability in Rapid7 Nexpose, published on 19 Aug 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021.

Weakness: CWE-306

Which versions are affected by CVE-2021-31868?

It affects 1 product.

Products include Rapid7 Nexpose.

How do I fix CVE-2021-31868?

No fix has been published for CVE-2021-31868 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2021-31868 being exploited?

There is no known exploitation of CVE-2021-31868 in the wild and no public exploit code.

Other vulnerabilities in Rapid7 Nexpose

• CVE-2017-5264 Cross-site request forgery in Nexpose High 8.8
• CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management High 8.7
• CVE-2017-5243 Weak cryptography in Nexpose hardware appliance High 8.5
• CVE-2017-5232 Other in Nexpose High 7.8
• CVE-2017-5230 Hardcoded credentials in Nexpose High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hpqv-2vqw-945v.