INDOTALENT WHMS、管理者権限奪取の脆弱性2件、修正版あり
Summary
INDOTALENT WHMSに、ソースに書かれた署名鍵と既定の管理者アカウントが原因で、認証なしに管理者権限を得られる脆弱性が2件あり、導入企業が対象です。修正版10.20261109へ更新し、鍵と管理者パスワードを環境ごとの値に替えてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
INDOTALENT WHMSに、ソースに書かれた署名鍵と既定の管理者アカウントが原因で、認証なしに管理者権限を得られる脆弱性が2件あり、導入企業が対象です。修正版10.20261109へ更新し、鍵と管理者パスワードを環境ごとの値に替えてください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| go2ismailAsp.Net-Core-Inventory-Order-Management-System |
< 10.20261109→ 10.20261109 |
10.20261109 |
Original description The description as published by the source.
INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID and role that the Tokens/DI.cs validator trusts, gaining administrator access to the entire API.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory github.com
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- patch github.com
- report github.com
- web github.com
- web github.com