CVE-2024-41432

An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbitrary IP address, specifically by adding a forged 'X-Forwarded' or 'Client-IP' header to requests. Exploiting IP spoofing, attackers can bypass account lockout mechanisms during attempts to log into admin accounts, spoof IP addresses in requests sent to the server, and impersonate IP addresses that have logged into user accounts, etc.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://gitlab.com/c2at3/cve-2024-41432/-/blob/main/README.md	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:likeshop:likeshop:*:*:*:*:*:*:*:*

History

08 Aug 2024, 15:02

Type	Values Removed	Values Added
Summary		(es) Se ha descubierto una vulnerabilidad de suplantación de IP en Likeshop hasta la versión 2.5.7.20210811. Este problema permite a un atacante reemplazar su dirección IP real con cualquier dirección IP arbitraria, específicamente agregando un encabezado falsificado 'X-Forwarded' o 'Client-IP' a las solicitudes. Al explotar la suplantación de IP, los atacantes pueden eludir los mecanismos de bloqueo de cuentas durante los intentos de iniciar sesión en cuentas de administrador, falsificar direcciones IP en solicitudes enviadas al servidor y hacerse pasar por direcciones IP que han iniciado sesión en cuentas de usuario, etc.
References	~~() https://gitlab.com/c2at3/cve-2024-41432/-/blob/main/README.md -~~	() https://gitlab.com/c2at3/cve-2024-41432/-/blob/main/README.md - Exploit
First Time		Likeshop likeshop Likeshop
CPE		cpe:2.3:a:likeshop:likeshop::::::::

07 Aug 2024, 18:35

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.3
CWE		CWE-290

07 Aug 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-07 16:15

Updated : 2024-08-08 15:02

NVD link : CVE-2024-41432

Mitre link : CVE-2024-41432

CVE.ORG link : CVE-2024-41432

JSON object : View

Products Affected

likeshop

likeshop

CWE

CWE-290

Authentication Bypass by Spoofing

{"id": "CVE-2024-41432", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-08-07T16:15:46.130", "references": [{"url": "https://gitlab.com/c2at3/cve-2024-41432/-/blob/main/README.md", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-290"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbitrary IP address, specifically by adding a forged 'X-Forwarded' or 'Client-IP' header to requests. Exploiting IP spoofing, attackers can bypass account lockout mechanisms during attempts to log into admin accounts, spoof IP addresses in requests sent to the server, and impersonate IP addresses that have logged into user accounts, etc."}, {"lang": "es", "value": "Se ha descubierto una vulnerabilidad de suplantaci\u00f3n de IP en Likeshop hasta la versi\u00f3n 2.5.7.20210811. Este problema permite a un atacante reemplazar su direcci\u00f3n IP real con cualquier direcci\u00f3n IP arbitraria, espec\u00edficamente agregando un encabezado falsificado 'X-Forwarded' o 'Client-IP' a las solicitudes. Al explotar la suplantaci\u00f3n de IP, los atacantes pueden eludir los mecanismos de bloqueo de cuentas durante los intentos de iniciar sesi\u00f3n en cuentas de administrador, falsificar direcciones IP en solicitudes enviadas al servidor y hacerse pasar por direcciones IP que han iniciado sesi\u00f3n en cuentas de usuario, etc."}], "lastModified": "2024-08-08T15:02:52.647", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:likeshop:likeshop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23902305-30D6-45BD-9E41-C630811F36EF", "versionEndIncluding": "2.5.7.20210811"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}