CVE-2017-18486

HOCH 7.2CVE-2017-18486 · Published 09/08/2019 · updated 17/06/2026

Kurz gesagt

CVE-2017-18486 ist eine Schwachstelle (HOCH (CVSS 7.2)) in helpdesk (jitbit).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.8%, höher als bei 92.0% aller Schwachstellen.
Abhilfe: auf 9.0.3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
helpdesk jitbit	`< 9.0.3`	`9.0.3`

Description

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.

References

Kc57/JitBit_Helpdesk_Auth_Bypass · Exploit
packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html · Third Party Advisory
exploit-db.com/exploits/42776 · Exploit
trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free