CVE-2024-42450

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-42450", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2024-08-02T01:04:07.984Z", "datePublished": "2024-11-19T17:21:41.498Z", "dateUpdated": "2024-11-21T04:55:12.404Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres to listen on all network interfaces. This combination allows an unauthenticated attacker to access and administer the database or read local filesystem contents to escalate privileges on the system. \n\nExploitation Status:\nVersa Networks is not aware of this exploitation in any production systems. A proof of concept exists in the lab environment.\n\nWorkarounds or Mitigation:\nStarting with the latest 22.1.4 version of Versa Director, the software will automatically restrict access to the Postgres and HA ports to only the local and peer Versa Directors. For older releases, Versa recommends performing manual hardening of HA ports. Please refer to the following link for the steps https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Secure_HA_Ports \n\nThis vulnerability is not exploitable on Versa Directors if published Firewall guidelines are implemented. We have validated that no Versa-hosted head ends have been affected by this vulnerability. All Versa-hosted head ends are patched and hardened. \n\nPlease contact Versa Technical Support or Versa account team for any further assistance.\n\nSoftware Download Links:\n22.1.4: https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4"}], "affected": [{"defaultStatus": "unaffected", "vendor": "Versa", "product": "Director", "versions": [{"version": "22.1.4", "status": "affected", "lessThanOrEqual": "22.1.4", "versionType": "semver"}]}], "references": [{"url": "https://security-portal.versa-networks.com/emailbulletins/6735a300415abb89e9a8a9d3"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2024-11-19T17:21:41.498Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-798", "lang": "en", "description": "CWE-798 Use of Hard-coded Credentials"}]}], "affected": [{"vendor": "versa", "product": "director", "cpes": ["cpe:2.3:a:versa:director:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "21.2.2", "status": "affected", "lessThanOrEqual": "21.2.3", "versionType": "semver"}, {"version": "22.1.1", "status": "affected", "lessThanOrEqual": "22.1.4", "versionType": "semver"}]}], "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-11-20T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-42450"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T04:55:12.404Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-42450", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-19T20:03:41.619801Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:versa:director:*:*:*:*:*:*:*:*"], "vendor": "versa", "product": "director", "versions": [{"status": "affected", "version": "21.2.2", "versionType": "semver", "lessThanOrEqual": "21.2.3"}, {"status": "affected", "version": "22.1.1", "versionType": "semver", "lessThanOrEqual": "22.1.4"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-798", "description": "CWE-798 Use of Hard-coded Credentials"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-19T20:03:37.447Z"}}], "cna": {"metrics": [{"cvssV3_0": {"version": "3.0", "baseScore": 10, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "affected": [{"vendor": "Versa", "product": "Director", "versions": [{"status": "affected", "version": "22.1.4", "versionType": "semver", "lessThanOrEqual": "22.1.4"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://security-portal.versa-networks.com/emailbulletins/6735a300415abb89e9a8a9d3"}], "descriptions": [{"lang": "en", "value": "The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres to listen on all network interfaces. This combination allows an unauthenticated attacker to access and administer the database or read local filesystem contents to escalate privileges on the system. \n\nExploitation Status:\nVersa Networks is not aware of this exploitation in any production systems. A proof of concept exists in the lab environment.\n\nWorkarounds or Mitigation:\nStarting with the latest 22.1.4 version of Versa Director, the software will automatically restrict access to the Postgres and HA ports to only the local and peer Versa Directors. For older releases, Versa recommends performing manual hardening of HA ports. Please refer to the following link for the steps https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Secure_HA_Ports \n\nThis vulnerability is not exploitable on Versa Directors if published Firewall guidelines are implemented. We have validated that no Versa-hosted head ends have been affected by this vulnerability. All Versa-hosted head ends are patched and hardened. \n\nPlease contact Versa Technical Support or Versa account team for any further assistance.\n\nSoftware Download Links:\n22.1.4: https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4"}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2024-11-19T17:21:41.498Z"}}}, "cveMetadata": {"cveId": "CVE-2024-42450", "state": "PUBLISHED", "dateUpdated": "2024-11-21T04:55:12.404Z", "dateReserved": "2024-08-02T01:04:07.984Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2024-11-19T17:21:41.498Z", "assignerShortName": "hackerone"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Director", "vendor": "Versa", "versions": [{"lessThanOrEqual": "22.1.4", "status": "affected", "version": "22.1.4", "versionType": "semver"}]}], "source": "support@hackerone.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:versa:director:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "director", "vendor": "versa", "versions": [{"lessThanOrEqual": "21.2.3", "status": "affected", "version": "21.2.2", "versionType": "semver"}, {"lessThanOrEqual": "22.1.4", "status": "affected", "version": "22.1.1", "versionType": "semver"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:versa-networks:versa_director:21.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "59E2F7B6-200B-4008-A5C6-FD33B05DFF8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:versa-networks:versa_director:21.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "DD6E1984-CC7D-47FB-9469-506D5B9B7764", "vulnerable": true}, {"criteria": "cpe:2.3:a:versa-networks:versa_director:22.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "BE334340-8D19-4A10-AB58-B9028D96851C", "vulnerable": true}, {"criteria": "cpe:2.3:a:versa-networks:versa_director:22.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B6870728-68E3-4B20-8846-184623B95B56", "vulnerable": true}, {"criteria": "cpe:2.3:a:versa-networks:versa_director:22.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "F42DE9E0-BECA-413B-9CEA-DA8C2CAAAD11", "vulnerable": true}, {"criteria": "cpe:2.3:a:versa-networks:versa_director:22.1.4:-:*:*:*:*:*:*", "matchCriteriaId": "272A25D5-8B29-4919-9C8A-D36DE8B592BF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres to listen on all network interfaces. This combination allows an unauthenticated attacker to access and administer the database or read local filesystem contents to escalate privileges on the system. \n\nExploitation Status:\nVersa Networks is not aware of this exploitation in any production systems. A proof of concept exists in the lab environment.\n\nWorkarounds or Mitigation:\nStarting with the latest 22.1.4 version of Versa Director, the software will automatically restrict access to the Postgres and HA ports to only the local and peer Versa Directors. For older releases, Versa recommends performing manual hardening of HA ports. Please refer to the following link for the steps https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Secure_HA_Ports \n\nThis vulnerability is not exploitable on Versa Directors if published Firewall guidelines are implemented. We have validated that no Versa-hosted head ends have been affected by this vulnerability. All Versa-hosted head ends are patched and hardened. \n\nPlease contact Versa Technical Support or Versa account team for any further assistance.\n\nSoftware Download Links:\n22.1.4: https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4"}, {"lang": "es", "value": "Versa Director utiliza PostgreSQL (Postgres) para almacenar datos operativos y de configuraci\u00f3n. Tambi\u00e9n es necesario para la funci\u00f3n de alta disponibilidad de Versa Director. La configuraci\u00f3n predeterminada tiene una contrase\u00f1a com\u00fan en todas las instancias de Versa Director. De forma predeterminada, Versa Director configura Postgres para escuchar en todas las interfaces de red. Esta combinaci\u00f3n permite que un atacante no autenticado acceda y administre la base de datos o lea el contenido del sistema de archivos local para aumentar los privilegios en el sistema. Estado de explotaci\u00f3n: Versa Networks no tiene conocimiento de esta explotaci\u00f3n en ning\u00fan sistema de producci\u00f3n. Existe una prueba de concepto en el entorno de laboratorio. Soluciones alternativas o mitigaci\u00f3n: a partir de la \u00faltima versi\u00f3n 22.1.4 de Versa Director, el software restringir\u00e1 autom\u00e1ticamente el acceso a los puertos Postgres y HA solo a los Versa Directors locales y de pares. Para versiones anteriores, Versa recomienda realizar un fortalecimiento manual de los puertos HA. Consulte el siguiente enlace para conocer los pasos https://docs.versa-networks.com/Solutions/System_Hardening/Perform_Manual_Hardening_for_Versa_Director#Secure_HA_Ports Esta vulnerabilidad no se puede explotar en Versa Directors si se implementan las pautas de firewall publicadas. Hemos validado que ninguna de las cabeceras alojadas en Versa se haya visto afectada por esta vulnerabilidad. Todas las cabeceras alojadas en Versa est\u00e1n parcheadas y reforzadas. Comun\u00edquese con el soporte t\u00e9cnico de Versa o con el equipo de cuentas de Versa para obtener m\u00e1s ayuda. Enlaces de descarga de software: 22.1.4: https://support.versa-networks.com/support/solutions/articles/23000026708-release-22-1-4"}], "id": "CVE-2024-42450", "lastModified": "2026-09-03T18:22:14.940", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "support@hackerone.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-42450", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-11-20T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2024-11-19T18:15:20.560", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://security-portal.versa-networks.com/emailbulletins/6735a300415abb89e9a8a9d3"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{}