InfoSecBulletin Cybersecurity for mankind
A new security flaw was found in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. This flaw could be used to get around authentication protections.
The vulnerability, CVE-2023-51467, is found in the login feature and is caused by a partial fix for another serious vulnerability (CVE-2023-49070, CVSS score: 9.8) released this month.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
The Hacker News said its report “The security measures taken to patch CVE-2023-49070 left the root issue intact and therefore the authentication bypass was still present,” the SonicWall Capture Labs threat research team, which discovered the bug, said in a statement shared with The Hacker News.
CVE-2023-49070 is a security flaw that allows threat actors to take control of a server and steal sensitive data. It affects versions before 18.12.10 of Apache OFBiz due to a deprecated XML-RPC component.
SonicWall reported that CVE-2023-51467 allows an attacker to bypass protection measures and gain unauthorized access to internal resources. This can be done by exploiting empty or invalid USERNAME and PASSWORD parameters in an HTTP request, which triggers an authentication success message.
The attack is based on the parameter “requirePasswordChange” being set to “Y” in the URL. This allows authentication to be easily bypassed, regardless of the username and password entered.
Attackers can bypass authentication to perform a Server-Side Request Forgery (SSRF) using this vulnerability. This information is provided by the NIST National Vulnerability Database (NVD).
Apache OFBiz users should update to version 18.12.11 or later as soon as possible to stay safe from potential threats.
ALSO READ:
