CVE-2020-7378

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in version 5.0-20200904, released September 4, 2020.

CVSS v3 9.1 CRITICAL
CVSS v2.0 6.4 MEDIUM

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/	Exploit Third Party Advisory
https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:opencrx:opencrx::::::::
	cpe:2.3:a:opencrx:opencrx:5.0:20200714::::::
	cpe:2.3:a:opencrx:opencrx:5.0:20200715::::::
	cpe:2.3:a:opencrx:opencrx:5.0:20200717::::::
	cpe:2.3:a:opencrx:opencrx:5.0.0:::::::*

History

21 Nov 2024, 05:37

Type	Values Removed	Values Added
References	~~() https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/ - Exploit, Third Party Advisory~~	() https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/ - Exploit, Third Party Advisory

Information

Published : 2020-11-24 17:15

Updated : 2024-11-21 05:37

NVD link : CVE-2020-7378

Mitre link : CVE-2020-7378

CVE.ORG link : CVE-2020-7378

JSON object : View

Products Affected

opencrx

opencrx

CWE

CWE-620

Unverified Password Change

CWE-287

Improper Authentication

{"id": "CVE-2020-7378", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@rapid7.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2020-11-24T17:15:11.270", "references": [{"url": "https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@rapid7.com"}, {"url": "https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cve@rapid7.com", "description": [{"lang": "en", "value": "CWE-620"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in version 5.0-20200904, released September 4, 2020."}, {"lang": "es", "value": "CRIXP OpenCRX versiones 4.30 y 5.0-20200717 y anteriores sufre de una vulnerabilidad de cambio de contrase\u00f1a no verificada. Un atacante que es capaz de conectarse a la instancia de OpenCRX afectada puede cambiar la contrase\u00f1a de cualquier usuario, incluyendo admin-Standard, para cualquier valor elegido. Este problema se resolvi\u00f3 en la versi\u00f3n 5.0-20200904, publicada el 4 de septiembre de 2020"}], "lastModified": "2024-11-21T05:37:08.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opencrx:opencrx:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8282601F-778E-4BCE-A249-9AF5632CB571", "versionEndIncluding": "4.3.0"}, {"criteria": "cpe:2.3:a:opencrx:opencrx:5.0:20200714:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0F57F4C-1DDA-4975-83BF-FCE95EF8391F"}, {"criteria": "cpe:2.3:a:opencrx:opencrx:5.0:20200715:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1404512-2851-4B11-82A4-6F6027E71E4D"}, {"criteria": "cpe:2.3:a:opencrx:opencrx:5.0:20200717:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "372C678B-244F-498E-8E1B-FA49BC94B521"}, {"criteria": "cpe:2.3:a:opencrx:opencrx:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0DFA3FE-F0A3-4674-9E2D-8049CBDE3CB4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@rapid7.com"}