CVE-2024-1965 Server-Side Request Forgery Vulnerability in Haivision Products
An unauthenticated attacker can exploit SSRF in Haivision Aviwest Manager to enumerate internal networks and compromise internal servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-1965?
CVE-2024-1965 is a medium-severity server-side request forgery vulnerability in Haivision Aviwest Manager, published on 28 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Server-Side Request Forgery vulnerability in Haivision's Aviwest Manager and Aviwest Steamhub. This vulnerability could allow an attacker to enumerate internal network configuration without the need for credentials. An attacker could compromise an internal server and retrieve requests sent by other users.
Weakness: CWE-918
Which versions are affected by CVE-2024-1965?
It affects 2 products.
Products include Haivision Maanager, Haivision Streamhub.
How do I fix CVE-2024-1965?
No fix has been published for CVE-2024-1965 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-1965 being exploited?
There is no known exploitation of CVE-2024-1965 in the wild and no public exploit code.
Sources
Also known as GHSA-9rj9-v7hh-cg8q.