Xorux XorMon-NG Vulnerability: From Read-Only to Read-Everything!
The Xorux XorMon-NG web application has a vulnerability that allows read-only users to become administrators. By exploiting an overlooked API endpoint, users can import configurations, granting themselves admin rights. Xorux has patched this in version 1.9.38. So, update now unless you enjoy having surprise administrators in your system.
Hot Take:
When life gives you lemons, you make lemonade. When XorMon-NG gives you a vulnerability, you make yourself an admin! Who knew privilege escalation could be this easy? Kudos to Jim Becher for finding an admin-level Easter egg in the XorMon-NG web application. Maybe next time, Xorux should consider a real-life game of “Where’s Waldo?” instead of “Where’s the Admin?”.
Key Points:
- An API endpoint intended for admins was accessible by lower-level users.
- This bug affects XorMon-NG version 1.8 and prior, on the Debian platform.
- The vulnerability allows read-only users to escalate privileges to an admin level.
- Xorux released an update, version 1.9.38, to address this issue.
- Jim Becher of KoreLogic discovered and reported the vulnerability.
Already a member? Log in here