What is GHSA-4w54-wwc9-x62c?

GHSA-4w54-wwc9-x62c is a security advisory published by GitHub Security Advisories with Critical severity. Silverpeas authentication bypass

Which CVE IDs does GHSA-4w54-wwc9-x62c cover?

GHSA-4w54-wwc9-x62c covers the following CVE IDs: CVE-2024-36042. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4w54-wwc9-x62c?

GHSA-4w54-wwc9-x62c has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-4w54-wwc9-x62c?

GHSA-4w54-wwc9-x62c affects 1 product, including: maven/org.silverpeas.core:silverpeas-core:\u003c 6.3.5.

GHSA-4w54-wwc9-x62cCriticalCVSS 9.8

Silverpeas authentication bypass

Vendor

GitHub Security Advisories

Published

June 3, 2024

Last Modified

July 5, 2024

🔗 CVE IDs covered (1)

CVE-2024-36042 →

📋 Description

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

🎯 Affected products1

maven/org.silverpeas.core:silverpeas-core:< 6.3.5

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-36042
https://gist.github.com/ChrisPritchard/4b6d5c70d9329ef116266a6c238dcb2d
https://silverpeas.org
https://github.com/Silverpeas/Silverpeas-Core/commit/11fb5e21c252ce4751b85fccf5b8076156e0b4f0
https://github.com/Silverpeas/Silverpeas-Core/tags
https://github.com/advisories/GHSA-4w54-wwc9-x62c