ConnectWise ScreenConnect身份验证绕过漏洞

详细信息

漏洞类型

其他

漏洞描述

ConnectWise ScreenConnect 23.9.7及更早版本受到使用备用路径或通道的身份验证绕过的影响。通过发送特制的请求，攻击者可以利用此漏洞绕过身份验证并获取管理访问权限。

修复建议

有关修补程序、升级或建议的解决方法信息，请参阅ConnectWise网站。参考链接： https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8

参考链接

• https://github.com/rapid7/metasploit-framework/pull/18870

  CVE · Third Party Advisory · Issue Tracking · Patch

• https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc

  CVE · Third Party Advisory · Exploit

• https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/

  CVE · Third Party Advisory · Press/Media Coverage

• https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/

  CVE · Third Party Advisory · Press/Media Coverage

• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8

  CVE · Vendor Advisory

• https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/

  CVE · Third Party Advisory

• https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass

  CVE · Third Party Advisory · Exploit

• https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2

  CVE · Third Party Advisory · Exploit

• https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8

  CVE · Third Party Advisory

• https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/

  CVE · Third Party Advisory · Press/Media Coverage

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709

  NVD · US Government Resource