CVE-2024-29868

CRITICAL NUCLEI LAB

Apache StreamPipes <0.95.0 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-29868. PoCs published by DEVisions. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-29868, demonstrating account takeover via weak PRNG in Apache StreamPipes' recovery token generation. It includes detection templates, exploitation code, and lab setup instructions.

Description

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery mechanism. This allows an attacker to guess the recovery token in a reasonable time and thereby to take over the attacked user's account. This issue affects Apache StreamPipes: from 0.69.0 through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.

Exploits (1)

nomisec WORKING POC 1 stars
by DEVisions · poc
https://github.com/DEVisions/CVE-2024-29868

This repository contains a functional exploit PoC for CVE-2024-29868, demonstrating account takeover via weak PRNG in Apache StreamPipes' recovery token generation. It includes detection templates, exploitation code, and lab setup instructions.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Apache StreamPipes 0.69.0 through 0.93.0
No auth needed
Prerequisites: Access to password recovery endpoint · Self-registration enabled
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

Apache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token Generation
CRITICALby Alessandro Albani - DEVisions
Shodan: http.title:"apache streampipes"
FOFA: title="apache streampipes"

References (2)

Core 2
Core References
Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/06/22/1
Mailing List, Vendor Advisory vendor-advisory
https://lists.apache.org/thread/g7t7zctvq2fysrw1x17flnc12592nhx7

Scores

CVSS v3 9.1
EPSS 0.8191
EPSS Percentile 99.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Lab Environment

COMMUNITY
Community Lab
docker pull consul:1.14.3
docker pull couchdb:3.3.1
docker pull fogsyio/kafka:2.2.0
docker pull fogsyio/zookeeper:3.4.13
docker pull influxdb:2.6
+1 more images

Details

CWE
CWE-338
Status published
Products (2)
apache/streampipes 0.69.0 - 0.93.0
org.apache.streampipes/streampipes-resource-management 0.69.0 - 0.95.0Maven
Published Jun 24, 2024
Tracked Since Feb 18, 2026