Yamcs: Unauthorized user enumeration via IAM API endpoints
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 4.3epss 1.1%
da publicação à arma0 dias
Publicada no NVD16 de jul.
1ª PoC29 de mai.
probabilidade de exploração
1.1%top 38% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
yamcs · yamcsPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/52604não verificadogithubgithub.com/ex-cal1bur/CVE-2026-44595★ 0⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://github.com/yamcs/yamcs/commit/0e12b518f103f24681299318a30a460fe4327b88https://github.com/yamcs/yamcs/commit/e90099fba98e96214217c195b6a5b87b5f46e51chttps://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0https://github.com/yamcs/yamcs/security/advisories/GHSA-p2rj-mrmc-9w29