CVE-2017-16935

Published: Nov 24, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request.

Affected (1)

Products: Ametys: Ametys

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ametys Ametys	Before 4.0.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://blogs.securiteam.com/index.php/archives/3517

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

https://issues.ametys.org/browse/RUNTIME-2582

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://blogs.securiteam.com/index.php/archives/3517

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical DescriptionThird Party Advisory

https://issues.ametys.org/browse/RUNTIME-2582

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.