CVE-2017-18486

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-332

Affected software

No affected versions have been published.

Timeline

Published
Aug 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-184876.1The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.CVE-2017-184886.1The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.CVE-2017-184896.1The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.CVE-2017-184906.1The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.CVE-2017-184916.1The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.CVE-2017-184926.1The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.CVE-2017-184936.1The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.CVE-2017-184946.1The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.CVE-2017-184956.1The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.CVE-2017-184966.1The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.CVE-2017-184976.1The liveforms plugin before 3.4.0 for WordPress has XSS.CVE-2017-184986.1The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
CVE-2017-18486: High severity, CVSS 7.2 | Vulnix