Vulnerability-Lookup

CNVD-2020-64599

Vulnerability from cnvd - Published: 2020-11-19

Title

ClickStudios Passwordstate授权问题漏洞

Description

clickstudios passwordstate（passwordstate）是澳大利亚clickstudios的一款密码管理软件。该软件为用户提供了密码保存功能，用户可以在软件中记录自己的各种账号和密码，软件还会保证账号密码的安全。 ClickStudios Passwordstate 8501之前版本存在安全漏洞，该漏洞源于ResetPassword函数未验证用户是否通过安全问题成功地进行了身份验证。攻击者可利用该漏洞可以向/account/ResetPassword页面发送精心设计的HTTP请求，为任何注册用户设置新密码。

Severity

中

Patch Name

ClickStudios Passwordstate授权问题漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://www.clickstudios.com.au/passwordstate-changelog.aspx

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-26061

Impacted products

Name
clickstudios ClickStudios Passwordstate <8501

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-26061",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-26061"
    }
  },
  "description": "clickstudios passwordstate\uff08passwordstate\uff09\u662f\u6fb3\u5927\u5229\u4e9aclickstudios\u7684\u4e00\u6b3e\u5bc6\u7801\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u4e3a\u7528\u6237\u63d0\u4f9b\u4e86\u5bc6\u7801\u4fdd\u5b58\u529f\u80fd\uff0c\u7528\u6237\u53ef\u4ee5\u5728\u8f6f\u4ef6\u4e2d\u8bb0\u5f55\u81ea\u5df1\u7684\u5404\u79cd\u8d26\u53f7\u548c\u5bc6\u7801\uff0c\u8f6f\u4ef6\u8fd8\u4f1a\u4fdd\u8bc1\u8d26\u53f7\u5bc6\u7801\u7684\u5b89\u5168\u3002\n\nClickStudios Passwordstate 8501\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eResetPassword\u51fd\u6570\u672a\u9a8c\u8bc1\u7528\u6237\u662f\u5426\u901a\u8fc7\u5b89\u5168\u95ee\u9898\u6210\u529f\u5730\u8fdb\u884c\u4e86\u8eab\u4efd\u9a8c\u8bc1\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u5411/account/ResetPassword\u9875\u9762\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684HTTP\u8bf7\u6c42\uff0c\u4e3a\u4efb\u4f55\u6ce8\u518c\u7528\u6237\u8bbe\u7f6e\u65b0\u5bc6\u7801\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1ahttps://www.clickstudios.com.au/passwordstate-changelog.aspx",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-64599",
  "openTime": "2020-11-19",
  "patchDescription": "clickstudios passwordstate\uff08passwordstate\uff09\u662f\u6fb3\u5927\u5229\u4e9aclickstudios\u7684\u4e00\u6b3e\u5bc6\u7801\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u4e3a\u7528\u6237\u63d0\u4f9b\u4e86\u5bc6\u7801\u4fdd\u5b58\u529f\u80fd\uff0c\u7528\u6237\u53ef\u4ee5\u5728\u8f6f\u4ef6\u4e2d\u8bb0\u5f55\u81ea\u5df1\u7684\u5404\u79cd\u8d26\u53f7\u548c\u5bc6\u7801\uff0c\u8f6f\u4ef6\u8fd8\u4f1a\u4fdd\u8bc1\u8d26\u53f7\u5bc6\u7801\u7684\u5b89\u5168\u3002\r\n\r\nClickStudios Passwordstate 8501\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eResetPassword\u51fd\u6570\u672a\u9a8c\u8bc1\u7528\u6237\u662f\u5426\u901a\u8fc7\u5b89\u5168\u95ee\u9898\u6210\u529f\u5730\u8fdb\u884c\u4e86\u8eab\u4efd\u9a8c\u8bc1\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u5411/account/ResetPassword\u9875\u9762\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684HTTP\u8bf7\u6c42\uff0c\u4e3a\u4efb\u4f55\u6ce8\u518c\u7528\u6237\u8bbe\u7f6e\u65b0\u5bc6\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "ClickStudios Passwordstate\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "clickstudios ClickStudios Passwordstate \u003c8501"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-26061",
  "serverity": "\u4e2d",
  "submitTime": "2020-10-20",
  "title": "ClickStudios Passwordstate\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2020-26061 (GCVE-0-2020-26061)

Vulnerability from cvelistv5 – Published: 2020-10-05 13:43 – Updated: 2024-08-04 15:49

Summary

ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted HTTP request to the /account/ResetPassword page to set a new password for any registered user.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

2 references

URL	Tags
https://www.clickstudios.com.au/passwordstate-cha…	x_refsource_MISC
https://github.com/missing0x00/CVE-2020-26061	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:49:06.860Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.clickstudios.com.au/passwordstate-changelog.aspx"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/missing0x00/CVE-2020-26061"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted HTTP request to the /account/ResetPassword page to set a new password for any registered user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-06T19:09:21.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.clickstudios.com.au/passwordstate-changelog.aspx"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/missing0x00/CVE-2020-26061"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-26061",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted HTTP request to the /account/ResetPassword page to set a new password for any registered user."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.clickstudios.com.au/passwordstate-changelog.aspx",
              "refsource": "MISC",
              "url": "https://www.clickstudios.com.au/passwordstate-changelog.aspx"
            },
            {
              "name": "https://github.com/missing0x00/CVE-2020-26061",
              "refsource": "MISC",
              "url": "https://github.com/missing0x00/CVE-2020-26061"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-26061",
    "datePublished": "2020-10-05T13:43:20.000Z",
    "dateReserved": "2020-09-24T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:49:06.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.