CVE-2021-44877

{"id": "CVE-2021-44877", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-12-21T17:15:08.590", "references": [{"url": "https://www.systeam.com.br/cve/broken-access-control-en.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability has been found while using a temporary generated token in order to consume api resources. The vulnerability allows an unauthenticated attacker to use an api endpoint to generate a temporary JWT token that is designed to reference the correct tenant prior to authentication, to request system configuration parameters using direct api requests. The correct exploitation of this vulnerability causes sensitive information exposure. In case the tenant has an smtp credential set, the full credential information is disclosed."}, {"lang": "es", "value": "Dalmark Systems Systeam 2.22.8 build 1724 es vulnerable al Control de Acceso Incorrecto. La aplicaci\u00f3n Systeam es un sistema ERP que usa una arquitectura mixta basada en la administraci\u00f3n de usuarios e inquilinos SaaS, y en la base de datos y la aplicaci\u00f3n web locales. Se ha encontrado una vulnerabilidad de control de acceso rota mientras es usado un token generado temporalmente para consumir recursos api. La vulnerabilidad permite a un atacante no autenticado usar un endpoint api para generar un token JWT temporal que est\u00e1 dise\u00f1ado para hacer referencia al inquilino correcto antes de la autenticaci\u00f3n, para solicitar par\u00e1metros de configuraci\u00f3n del sistema usando peticiones api directas. La explotaci\u00f3n correcta de esta vulnerabilidad causa la exposici\u00f3n de informaci\u00f3n confidencial. En caso de que el inquilino tenga un conjunto de credenciales smtp, se revela la informaci\u00f3n completa de las credenciales"}], "lastModified": "2022-07-12T17:42:04.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dalmark:systeam_enterprise_resource_planning:2.22.8:build_1724:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA84FF69-3864-4439-B930-7E9418418F14"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}