CVE-2024-45229 Information disclosure in Director
Attackers can steal authentication tokens from unauthenticated APIs on internet-exposed Versa Directors, enabling unauthorized access to management functions.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45229?
CVE-2024-45229 is a medium-severity vulnerability in Versa Director, published on 20 Sep 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can be exploited by injecting invalid arguments into a GET request, potentially exposing the authentication tokens of other currently logged-in users. These tokens can then be used to invoke additional APIs on port 9183. This exploit does not disclose any username or password information. Currently, there are no workarounds in Versa Director. However, if there is Web Application Firewall (WAF) or API Gateway fronting the Versa Director, it can be used to block access to the URLs of vulnerable API. /vnms/devicereg/device/* (on ports 9182 & 9183) and /versa/vnms/devicereg/device/* (on port 443). Versa recommends that Directors be upgraded to one of the remediated software versions. This vulnerability is not exploitable on Versa Directors not exposed to the Internet.We have validated that no Versa-hosted head ends have been affected by this vulnerability. Please contact Versa Technical Support or Versa account team for any further assistance.
Weakness: CWE-306
Which versions are affected by CVE-2024-45229?
It affects 1 product.
Products include Versa-Networks Versa Director.
How do I fix CVE-2024-45229?
No fix has been published for CVE-2024-45229 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-45229 being exploited?
There is no known exploitation of CVE-2024-45229 in the wild and no public exploit code.
Other vulnerabilities in Versa Director
Sources
Also known as GHSA-q2pv-h46f-8gvc.