CVE-2024-27113

An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability has been remediated in version 1.52.02.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://csirt.divd.nl/CVE-2024-27113	Broken Link

Configurations

Configuration 1 (hide)

cpe:2.3:a:soplanning:soplanning:*:*:*:*:*:*:*:*

History

18 Sep 2024, 18:43

Type	Values Removed	Values Added
CWE		CWE-639
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
References	~~() https://csirt.divd.nl/CVE-2024-27113 -~~	() https://csirt.divd.nl/CVE-2024-27113 - Broken Link
CPE		cpe:2.3:a:soplanning:soplanning::::::::
Summary		(es) Se ha encontrado una referencia directa a objeto insegura (IDOR) no autenticada a la base de datos en la herramienta de planificación de SO que se produce cuando se habilita la configuración de vista pública. Un atacante podría usar esta vulnerabilidad para obtener acceso a la base de datos subyacente exportándola como un archivo CSV. La vulnerabilidad se ha solucionado en la versión 1.52.02.
First Time		Soplanning Soplanning soplanning

11 Sep 2024, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-11 14:15

Updated : 2024-09-18 18:43

NVD link : CVE-2024-27113

Mitre link : CVE-2024-27113

CVE.ORG link : CVE-2024-27113

JSON object : View

Products Affected

soplanning

soplanning

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-27113", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "csirt@divd.nl", "cvssData": {"safety": "NEGLIGIBLE", "version": "4.0", "recovery": "AUTOMATIC", "baseScore": 9.3, "automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:C/RE:M/U:Red", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "RED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "modifiedAttackVector": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subsequentSystemIntegrity": "NONE", "vulnerableSystemIntegrity": "HIGH", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "confidentialityRequirements": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "subsequentSystemAvailability": "NONE", "vulnerableSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "vulnerableSystemConfidentiality": "HIGH", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED"}}]}, "published": "2024-09-11T14:15:12.947", "references": [{"url": "https://csirt.divd.nl/CVE-2024-27113", "tags": ["Broken Link"], "source": "csirt@divd.nl"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-639"}]}, {"type": "Secondary", "source": "csirt@divd.nl", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability has been remediated in version 1.52.02."}, {"lang": "es", "value": "Se ha encontrado una referencia directa a objeto insegura (IDOR) no autenticada a la base de datos en la herramienta de planificaci\u00f3n de SO que se produce cuando se habilita la configuraci\u00f3n de vista p\u00fablica. Un atacante podr\u00eda usar esta vulnerabilidad para obtener acceso a la base de datos subyacente export\u00e1ndola como un archivo CSV. La vulnerabilidad se ha solucionado en la versi\u00f3n 1.52.02."}], "lastModified": "2024-09-18T18:43:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:soplanning:soplanning:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37301719-C761-4C67-9214-CA5AC8747913", "versionEndExcluding": "1.52.02"}], "operator": "OR"}]}], "sourceIdentifier": "csirt@divd.nl"}