Attacker Value
Moderate
0

CVE-2017-6529

Disclosure Date: March 09, 2017

Exploitability

(1 user assessed) Very High
Attack Vector
Network
Privileges Required
None
User Interaction
Required

Description

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter.

Add Assessment

1
Ratings
  • Attacker Value
    Medium
  • Exploitability
    Very High
Technical Analysis

The uid field is passed within a GET parameter. These are sequential integers, so it is trivial to enumerate them all. The session for the UID needs to be valid, and the timeout is rather long. So it’s rather trivial to simply enumerate through them in an infinite loop to get an admin.

General Information

Additional Info

Technical Analysis