InfoSecBulletin Cybersecurity for mankind
A new security flaw was found in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. This flaw could be used to get around authentication protections.
The vulnerability, CVE-2023-51467, is found in the login feature and is caused by a partial fix for another serious vulnerability (CVE-2023-49070, CVSS score: 9.8) released this month.
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
The Hacker News said its report “The security measures taken to patch CVE-2023-49070 left the root issue intact and therefore the authentication bypass was still present,” the SonicWall Capture Labs threat research team, which discovered the bug, said in a statement shared with The Hacker News.
CVE-2023-49070 is a security flaw that allows threat actors to take control of a server and steal sensitive data. It affects versions before 18.12.10 of Apache OFBiz due to a deprecated XML-RPC component.
SonicWall reported that CVE-2023-51467 allows an attacker to bypass protection measures and gain unauthorized access to internal resources. This can be done by exploiting empty or invalid USERNAME and PASSWORD parameters in an HTTP request, which triggers an authentication success message.
The attack is based on the parameter “requirePasswordChange” being set to “Y” in the URL. This allows authentication to be easily bypassed, regardless of the username and password entered.
Attackers can bypass authentication to perform a Server-Side Request Forgery (SSRF) using this vulnerability. This information is provided by the NIST National Vulnerability Database (NVD).
Apache OFBiz users should update to version 18.12.11 or later as soon as possible to stay safe from potential threats.
ALSO READ:
