Yamcs: Unauthorized user enumeration via IAM API endpoints
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 4.3epss 1.1%
de la publicación al arma0 días
Publicada en NVD16 jul
1ª PoC29 may
probabilidad de explotación
1.1%top 38% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
yamcs · yamcsPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/52604no verificadogithubgithub.com/ex-cal1bur/CVE-2026-44595★ 0⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/yamcs/yamcs/commit/0e12b518f103f24681299318a30a460fe4327b88https://github.com/yamcs/yamcs/commit/e90099fba98e96214217c195b6a5b87b5f46e51chttps://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0https://github.com/yamcs/yamcs/security/advisories/GHSA-p2rj-mrmc-9w29