header-logo
Suggest Exploit
vendor:
HelpDesk
by:
Rob Simon (Kc57)
8,8
CVSS
HIGH
Broken Authentication
287
CWE
Product Name: HelpDesk
Affected Version From: 9.0.2
Affected Version To: 9.0.2
Patch Exists: YES
Related CWE: NA
CPE: a:jitbit:helpdesk
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows Server 2012
2017

JitBit HelpDesk <= 9.0.2 Broken Authentication

JitBit HelpDesk version 9.0.2 and prior suffer from a broken authentication vulnerability. An attacker can exploit this vulnerability to gain access to the application and potentially gain access to sensitive data. This vulnerability is due to the application not properly validating user credentials. An attacker can exploit this vulnerability by sending a specially crafted request to the application.

Mitigation:

Upgrade to the latest version of JitBit HelpDesk. Additionally, ensure that proper authentication and authorization controls are in place.
Source

Exploit-DB raw data:

# Exploit Title: JitBit HelpDesk <= 9.0.2 Broken Authentication
# Google Dork: "Powered by Jitbit HelpDesk" -site:jitbit.com
# Date: 09/22/2017
# Exploit Author: Rob Simon (Kc57) - TrustedSec www.trustedsec.com
# Vendor Homepage: https://www.jitbit.com/helpdesk/
# Download Link: https://static.jitbit.com/HelpDeskTrial.zip
# Version: 9.0.2
# Tested on: Windows Server 2012
# CVE : NA

Proof of Concept:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42776.zip

Navigation

Suggest Exploit

Services By CQR