ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

CVE-2023-0872

What is CVE-2023-0872?

The Horizon REST API in OpenMNS versions 31.0.8 and earlier is exposed to a vulnerability that allows elevation of privilege through a flaw in the users endpoint. This issue necessitates an upgrade to versions 32.0.2 or newer to mitigate the risks. OpenNMS emphasizes that both Meridian and Horizon installations are meant for private networks and should not be accessible from public internet sources.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-0872
Created by Rapid7

References