InfoSecBulletin Cybersecurity for mankind
A new security flaw was found in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. This flaw could be used to get around authentication protections.
The vulnerability, CVE-2023-51467, is found in the login feature and is caused by a partial fix for another serious vulnerability (CVE-2023-49070, CVSS score: 9.8) released this month.
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
The Hacker News said its report “The security measures taken to patch CVE-2023-49070 left the root issue intact and therefore the authentication bypass was still present,” the SonicWall Capture Labs threat research team, which discovered the bug, said in a statement shared with The Hacker News.
CVE-2023-49070 is a security flaw that allows threat actors to take control of a server and steal sensitive data. It affects versions before 18.12.10 of Apache OFBiz due to a deprecated XML-RPC component.
SonicWall reported that CVE-2023-51467 allows an attacker to bypass protection measures and gain unauthorized access to internal resources. This can be done by exploiting empty or invalid USERNAME and PASSWORD parameters in an HTTP request, which triggers an authentication success message.
The attack is based on the parameter “requirePasswordChange” being set to “Y” in the URL. This allows authentication to be easily bypassed, regardless of the username and password entered.
Attackers can bypass authentication to perform a Server-Side Request Forgery (SSRF) using this vulnerability. This information is provided by the NIST National Vulnerability Database (NVD).
Apache OFBiz users should update to version 18.12.11 or later as soon as possible to stay safe from potential threats.
ALSO READ:
