CVE-2023-5830

HIGHNuclei

ColumbiaSoft Document Locator WebTools login improper authentication

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-5830 has a selected CVSS score of 7.3 (high); EIP currently links 1 Nuclei template.

Description

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack remotely. Upgrading to version 7.2 SP4 and 2021.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-243729 was assigned to this vulnerability.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 11, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 9, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Document Locator

Browse ColumbiaSoft / Document Locator
CVE ListVersion range not suppliedaffected

document_locator

Browse documentlocator / document_locator
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALColumbiaSoft DocumentLocator - Improper AuthenticationCVSS 9.8

Instances of ColumbiaSoft's Document Locator prior to version 7.2 SP4 and 2021.1 are vulnerable to an Improper Authentication/SSRF vulnerability. This template identifies vulnerable instances of the ColumbiaSoft Document Locater application by confirming external DNS interaction/lookups by modifying the value of the client-side SERVER parameter at /api/authentication/login.

Impact

An attacker could exploit this vulnerability to gain unauthorized access to sensitive information.

Remediation

Upgrade to a patched version of ColumbiaSoft DocumentLocator to fix the improper authentication issue.

WeaknessesCWE-287
AuthorsGonski
Template tagscvecve2023ssrfunauthcolumbiasoftintrusivewebtoolsdocumentlocatorvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:documentlocator:document_locator:*:*:*:*:*:*:*:*
Shodan: title:"Document Locator - WebTools"
Shodan: http.title:"document locator - webtools"
FOFA: title="document locator - webtools"
Google: intitle:"document locator - webtools"
https://nvd.nist.gov/vuln/detail/CVE-2023-5830 https://vuldb.com/?ctiid.243729 https://github.com/advisories/GHSA-j89v-wm7x-4434 https://vuldb.com/?id.243729

Source: ProjectDiscovery

References

3