Listen to this Post
How the mentioned CVE works
This CVE-2024-27115 exploits a weakness in the user creation module of the NovoSGA software. The application’s `/novosga.users/new` endpoint, responsible for creating new user accounts, fails to enforce a strong password policy. An attacker can remotely interact with this page and create user accounts with weak, easily guessable passwords. Since the ‘Senha’ (Password) and ‘Confirmação da senha’ (Password Confirmation) fields do not require complexity, accounts can be compromised through simple brute-force or credential stuffing attacks. The manipulation of these input arguments allows for the establishment of accounts with minimal security, effectively lowering the overall defense of the application.
Platform: Mangati NovoSGA
Version: Up to 2.2.12
Vulnerability: Weak Password Policy
Severity: Medium
date: 2024-03-28
Prediction: 2024-04-25
What Undercode Say:
curl -X POST http://<target>/novosga.users/new -d "username=attacker1&Senha=1&confirmacao_da_senha=1"
hydra -L userlist.txt -p password.txt <target> http-post-form "/novosga.users/new:username=^USER^&Senha=^PASS^&confirmacao_da_senha=^PASS^:F=incorrect"
How Exploit:
Remote password policy bypass.
Account creation with weak passwords.
Leads to unauthorized access.
Protection from this CVE
Implement strong password policy.
Enforce complexity requirements.
Upgrade to patched version.
Impact:
Account takeover possible.
System integrity compromised.
Initial access for attackers.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
