cbcvebase.
CVE-2021-42949
published 2022-09-16

CVE-2021-42949: The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass…

PriorityP267critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
5.51%
91.8th percentile
The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.

Affected

3 ranges
VendorProductVersion rangeFixed in
debianhoteldruid< hoteldruid 3.0.4-1 (bookworm)hoteldruid 3.0.4-1 (bookworm)
digitaldruidhoteldruid——
digitaldruidhoteldruid>= 0 < 3.0.4-13.0.4-1

Detection & IOCsextracted from sources · hover to see the quote

url/hoteldruid/inizio.php
url/inizio.php
yara
strings: $a = " HotelDruid " $b = "INSERT:" $c = "TABLES:" condition: all of them
  • →Probe for unauthenticated access to the HotelDruid management panel by sending a GET request to /hoteldruid/inizio.php or /inizio.php; a 200 response containing the strings ' HotelDruid ', 'INSERT:', and 'TABLES:' (all three) in the body indicates an exposed/vulnerable instance.
  • →The vulnerability stems from the controlla_login function generating predictable session tokens; monitor for high-volume sequential or patterned session token requests against the login endpoint as a sign of brute-force exploitation. ↗
  • ·The Nuclei template targets both /hoteldruid/inizio.php and /inizio.php install paths; deployments may vary, so both paths should be checked during detection.
  • ·The vulnerability is fixed in HotelDruid v3.0.4-1 (Debian bookworm/sid); instances still running v3.0.3 remain exploitable. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.