CVE-2024-6202

HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate arbitrary HaloITSM users by just knowing their email address. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://haloitsm.com/guides/article/?kbid=2154	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:haloservicesolutions:haloitsm::::::::
	cpe:2.3:a:haloservicesolutions:haloitsm::::::::

History

29 Aug 2024, 17:48

Type	Values Removed	Values Added
First Time		Haloservicesolutions haloitsm Haloservicesolutions
References	~~() https://haloitsm.com/guides/article/?kbid=2154 -~~	() https://haloitsm.com/guides/article/?kbid=2154 - Vendor Advisory
CPE		cpe:2.3:a:haloservicesolutions:haloitsm::::::::

06 Aug 2024, 16:30

Type	Values Removed	Values Added
Summary		(es) Las versiones de HaloITSM hasta 2.146.1 se ven afectadas por una vulnerabilidad SAML XML Signature Wrapping (XSW). Al tener configurada una integración SAML, los actores anónimos podrían hacerse pasar por usuarios arbitrarios de HaloITSM con solo conocer su dirección de correo electrónico. Las versiones de HaloITSM posteriores a la 2.146.1 (y los parches a partir de la 2.143.61) corrigen la vulnerabilidad mencionada.

06 Aug 2024, 06:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-06 06:15

Updated : 2024-08-29 17:48

NVD link : CVE-2024-6202

Mitre link : CVE-2024-6202

CVE.ORG link : CVE-2024-6202

JSON object : View

Products Affected

haloservicesolutions

haloitsm

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2024-6202", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "vulnerability@ncsc.ch", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-08-06T06:15:35.487", "references": [{"url": "https://haloitsm.com/guides/article/?kbid=2154", "tags": ["Vendor Advisory"], "source": "vulnerability@ncsc.ch"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Secondary", "source": "vulnerability@ncsc.ch", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate arbitrary HaloITSM users by just knowing their email address. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability."}, {"lang": "es", "value": "Las versiones de HaloITSM hasta 2.146.1 se ven afectadas por una vulnerabilidad SAML XML Signature Wrapping (XSW). Al tener configurada una integraci\u00f3n SAML, los actores an\u00f3nimos podr\u00edan hacerse pasar por usuarios arbitrarios de HaloITSM con solo conocer su direcci\u00f3n de correo electr\u00f3nico. Las versiones de HaloITSM posteriores a la 2.146.1 (y los parches a partir de la 2.143.61) corrigen la vulnerabilidad mencionada."}], "lastModified": "2024-08-29T17:48:43.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:haloservicesolutions:haloitsm:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C394C94-9968-465E-98B9-7BC8429BAD67", "versionEndExcluding": "2.143.61"}, {"criteria": "cpe:2.3:a:haloservicesolutions:haloitsm:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEBD3BDE-57DA-41C9-821A-F8C6A8864FC7", "versionEndExcluding": "2.146.1", "versionStartIncluding": "2.144"}], "operator": "OR"}]}], "sourceIdentifier": "vulnerability@ncsc.ch"}