IFM: weak password recovery vulnerability in moneo appliance
An unauthenticated remote attacker could reset the administrator's password with information from the default, self-signed certificate.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3485US | — | — | ||
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full contr… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- Mitigationmoneo appliance
The certificate is renewed by adjusting the hostname to an own customer-specific, so it does not contain the serial number.
- Mitigationmoneo appliance <=1.9.3 installed on QHA210
The certificate is renewed by adjusting the hostname to an own customer-specific, so it does not contain the serial number.
- Behobenmoneo appliance
The password-reset mechanism will be updated in a future version. When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.
- Behobenmoneo appliance <=1.9.3 installed on QHA210
The password-reset mechanism will be updated in a future version. When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan