CVE-2023-0872highCWE-269

CVE-2023-0872: falha de alta gravidade em The OpenNMS Group Horizon

ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Horizon+ Monitorar Meridian

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

36Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 8.2epss 3.3%
da publicação à armano mesmo dia
Publicada no NVD14 de ago.
metasploit1 de jul.
The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Produtos afetados
The OpenNMS Group · HorizonThe OpenNMS Group · Meridian
CVEs relacionadas — The OpenNMS Group Horizon

No mesmo produto, das mais perigosas para as menos.

CVE-2023-40315MEDIUMROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMINEPSS 2.9%CVE-2023-40313HIGHDisable BeanShell Interpreter Remote Server ModeEPSS 0.8%CVE-2023-40311MEDIUMStored XSS in multiple JSP files in opennms/opennmsEPSS 0.7%CVE-2023-40312MEDIUMReflected XSS in multiple JSP files in opennms/opennmsEPSS 0.6%CVE-2023-0815MEDIUMPlaintext Password Present in the Web logsEPSS 0.6%CVE-2023-0871MEDIUMAn XML External Entity injection vulnerabilityEPSS 0.5%