ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

CVE-2023-40315

What is CVE-2023-40315?

In versions of OpenMNS Horizon prior to 32.0.2 and Meridian earlier than 2023.1.5, a vulnerability exists that allows users with the ROLE_FILESYSTEM_EDITOR to elevate their permissions to ROLE_ADMIN or other roles. This could lead to unauthorized access and control over organizational resources. Users are advised to upgrade to the latest versions to mitigate this risk. Installation of OpenNMS products should be limited to private networks and not accessible directly from the Internet.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-40315
Created by Rapid7

References