Malicious Administrator Could Use Session IDs to Bypass Attribution
CVE-2024-4447

9.9CRITICAL

Key Information:

Vendor

Dotcms

Status
Dotcms Core
Vendor
CVE Published:
26 July 2024

What is CVE-2024-4447?

The DotCMS Maintenance Tool's Logged Users tab exposes session ID data via the Direct Web Remoting API, allowing unauthorized administrators to access session information of all users. Although this information is intended for admins with 'Sign In As' permissions, those without this privilege can exploit session IDs to impersonate other users. This vulnerability facilitates obfuscation of actions, enabling a malicious administrator to perform operations without traceability in the log files. Such capability could allow the misuse of session IDs to generate API tokens, heightening security risks.

Affected Version(s)

dotCMS core 4.2.1 < 23.01.20

References

https://www.dotcms.com/security/SI-72

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.