CVE-2020-11463

{"id": "CVE-2020-11463", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-04-01T21:15:14.003", "references": [{"url": "https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoing email credentials. This enables an attacker to get full access to all emails sent or received by the system including password reset emails, making it possible to reset any user's password."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Deskpro versiones anteriores a 2019.8.0. El endpoint /api/email_accounts present\u00f3 un fallo al comprobar apropiadamente los privilegios de un usuario, permitiendo a un atacante recuperar credenciales de texto sin cifrar de todas las cuentas de correo electr\u00f3nico del servicio de asistencia (helpdesk), incluyendo las credenciales de correo electr\u00f3nico entrantes y salientes. Esto permite a un atacante obtener acceso completo a todos los correos electr\u00f3nicos enviados o recibidos por el sistema, incluyendo los correos electr\u00f3nicos de restablecimiento de contrase\u00f1a, haciendo posible restablecer la contrase\u00f1a de cualquier usuario."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:deskpro:deskpro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC810F59-EA83-4340-8C19-5F995C4284E5", "versionEndExcluding": "2019.8.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}