CVE-2019-18642
Critical
Description
Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and use of sequential user IDs allows any user to change account details of any other user. This vulnerability could be used to change the email address of another account, even the administrator account. Upon changing another account's email address, performing a password reset to the new email address could allow an attacker to take over any account.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSparkdevnetwork Rock Rms
PublishedJan 7, 2021
First seenJan 7, 2021
How to fix
Update
- sparkdevnetwork rock_rms8.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sparkdevnetwork rock_rms | v < 8.6 | 8.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.