CVE-2022-34267

CRITICALNuclei

RWS WorldServer - Authentication Bypass

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-34267 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryCRITICALRWS WorldServer - Authentication BypassCVSS 9.8

An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.

Impact

Unauthenticated attackers can bypass all authentication by adding a token parameter with value 02, then upload and execute arbitrary Java code via JAR archives, potentially compromising the translation management system and accessing sensitive multilingual content.

Remediation

Upgrade to RWS WorldServer version 11.7.3 or later that properly validates authentication tokens and restricts API access.

WeaknessesCWE-287
Authorspdresearch, iamnoooob, rootxharsh, parthmalhotra
Template tagscvecve2022worldserverauth-bypassvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:rws:worldserver:*:*:*:*:*:*:*:*
Shodan: title:"WorldServer"
https://www.triskelelabs.com/vulnerabilities-in-rws-worldserver https://www.rws.com/localization/products/trados-enterprise/worldserver/ https://github.com/tanjiti/sec_profile

Source: ProjectDiscovery

References

3