ZDI-CAN-22360: ZDI-24-111: Allegra Hard-coded Credentials Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a database. The issue results from the use of a hardcoded password. An attacker can leverage this vulnerability to bypass authentication on the system.
Other sources
This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2023-22360.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22360?
The severity of ZDI-CAN-22360 is classified as critical due to its potential for remote attackers to bypass authentication without requiring credentials.
How do I fix ZDI-CAN-22360?
To fix ZDI-CAN-22360, it is recommended to update Allegra to the latest version that addresses this vulnerability.
What types of systems are affected by ZDI-CAN-22360?
ZDI-CAN-22360 affects installations of Allegra that are improperly configured with hardcoded credentials.
Can ZDI-CAN-22360 be exploited remotely?
Yes, ZDI-CAN-22360 can be exploited remotely as it does not require authentication for exploitation.
What are the implications of not addressing ZDI-CAN-22360?
Failing to address ZDI-CAN-22360 may allow attackers to gain unauthorized access to sensitive data and potentially compromise the system.