cbcvebase.
CVE-2017-7312
published 2017-06-07

CVE-2017-7312: An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing…

PriorityP356critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
2.97%
85.6th percentile
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).

Affected

3 ranges
VendorProductVersion rangeFixed in
personifycorppersonify360——
personifycorppersonify360——
personifycorppersonify360——

Detection & IOCsextracted from sources · hover to see the quote

urlhttp://site.com/Default.aspx?tabId=275↗
path/Default.aspx?tabId=275↗
  • →Monitor unauthenticated HTTP GET requests to /Default.aspx?tabId=275 or /TabId/275, which exposes vendor account management including plaintext credentials. ↗
  • →Alert on unauthenticated access to the Vendor Management page; exploitation allows reading plaintext username, password, and block (API password) fields. ↗
  • →Watch for POST requests to the same URI that may indicate creation of new rogue vendor/API accounts or modification of existing vendor roles. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.