CVE-2024-24621

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:softaculous:webuzo:*:*:*:*:*:*:*:*

History

30 Jul 2024, 15:36

Type	Values Removed	Values Added
First Time		Softaculous Softaculous webuzo
CPE		cpe:2.3:a:softaculous:webuzo::::::::
References	~~() https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/ -~~	() https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/ - Third Party Advisory

Information

Published : 2024-07-25 22:15

Updated : 2024-07-30 15:36

NVD link : CVE-2024-24621

Mitre link : CVE-2024-24621

CVE.ORG link : CVE-2024-24621

JSON object : View

Products Affected

softaculous

webuzo

CWE

CWE-697

Incorrect Comparison

{"id": "CVE-2024-24621", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Secondary", "source": "disclosures@exodusintel.com", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "disclosures@exodusintel.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-07-25T22:15:05.230", "references": [{"url": "https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/", "tags": ["Third Party Advisory"], "source": "disclosures@exodusintel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-697"}]}, {"type": "Secondary", "source": "disclosures@exodusintel.com", "description": [{"lang": "en", "value": "CWE-697"}]}], "descriptions": [{"lang": "en", "value": "Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user."}, {"lang": "es", "value": "Softaculous Webuzo contiene una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n a trav\u00e9s de la funcionalidad de restablecimiento de contrase\u00f1a. Los atacantes remotos y an\u00f3nimos pueden aprovechar esta vulnerabilidad para obtener acceso completo al servidor como usuario root."}], "lastModified": "2024-07-30T15:36:10.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softaculous:webuzo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "359222CD-17E4-411F-951D-6E1A83AF0133", "versionEndExcluding": "4.2.9"}], "operator": "OR"}]}], "sourceIdentifier": "disclosures@exodusintel.com"}