Vulnerability · Published Jun 20, 2024 · Assigned by SEC-VLab

CVE-2023-49112Insecure Direct Object Reference in Kiuwan SAST

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in SAST from Kiuwan. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 55.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access control mechanisms, allowing other authenticated users to read information about applications, even though they have not been granted the necessary rights to do so. This issue affects Kiuwan SAST: <master.1808.p685.q13371

Affected products (as reported)

Vendor	Product	Versions
Kiuwan	SAST	<master.1808.p685.q13371

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://r.sec-consult.com/kiuwan third-party-advisory
https://www.kiuwan.com/docs/display/K5/%5B2024-05-30%5D+Change+Log release-notes
http://seclists.org/fulldisclosure/2024/Jun/3