CVE-2024-1621 uniFLOW Online device registration susceptible to compromise
Attackers can register against genuine users via compromised email login flows, gaining unauthorized access and capabilities in uniFLOW Online.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-1621?
CVE-2024-1621 is a high-severity authentication bypass vulnerability in NT-ware uniFLOW Online, published on 2 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The registration process of uniFLOW Online (NT-ware product) apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allow the attacker to register themselves against a genuine user in the system and allow malicious users with similar access and capabilities via the app to the existing genuine user.
Weakness: CWE-940
Which versions are affected by CVE-2024-1621?
It affects 3 products.
Products include Nt-Ware Uniflow Online, Nt-Ware Uniflow Online Print \& Scan, Nt-Ware Uniflow Smartclient.
How do I fix CVE-2024-1621?
No fix has been published for CVE-2024-1621 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-1621 being exploited?
There is no known exploitation of CVE-2024-1621 in the wild and no public exploit code.
Sources
Also known as GHSA-fvjr-4pf9-7pjq.