CVE-2024-45805: OpenCTI leaks support information due to inadequate access control
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGSSUPPORT). This is due to inadequate access control for support information (http://<openctidomain>/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45805?
CVE-2024-45805 has not been assigned a specific severity rating, but it is classified as a critical access control vulnerability.
How do I fix CVE-2024-45805?
To fix CVE-2024-45805, you should upgrade your OpenCTI platform to version 6.3.0 or later.
Who is affected by CVE-2024-45805?
All users running OpenCTI versions prior to 6.3.0 are vulnerable to CVE-2024-45805.
What type of vulnerability is CVE-2024-45805?
CVE-2024-45805 is an access control vulnerability that allows unauthorized users to access privileged information.
Can CVE-2024-45805 be exploited remotely?
Yes, CVE-2024-45805 can potentially be exploited remotely by users with general access.