CVE-2026-110972

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-110972", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "state": "PUBLISHED", "assignerShortName": "CERT-PL", "dateReserved": "2026-10-15T10:24:54.756Z", "datePublished": "2026-10-30T11:56:49.582Z", "dateUpdated": "2026-11-03T09:13:32.724Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2026-11-03T09:13:32.724Z"}, "title": "Use of Client-Side Authentication in P\u0142atnik", "datePublic": "2026-10-30T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-603", "description": "CWE-603 Use of Client-Side authentication", "type": "CWE"}]}], "affected": [{"vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych", "product": "P\u0142atnik", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "10.02.002", "changes": [{"at": "metric 334", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "10.02.002"}]}]}], "descriptions": [{"lang": "en", "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\n\n\n\nThis issue was fixed\u00a0in metric\u00a0334\u00a0in version 10.02.002.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.<br><div><br></div><div>This issue was fixed<span>&nbsp;</span><span>in metric&nbsp;</span>334<span>&nbsp;in version 10.02.002.</span></div>"}]}], "references": [{"url": "https://cert.pl/posts/2026/10/CVE-2026-110970", "tags": ["third-party-advisory"]}, {"url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik", "tags": ["product"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.6, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "Wojciech Gie\u0142da", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.3"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T15:26:06.783259Z", "id": "CVE-2026-110972", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T15:26:20.225Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-110972", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-30T15:26:06.783259Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T15:26:16.012Z"}}], "cna": {"title": "Use of Client-Side Authentication in P\u0142atnik", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Wojciech Gie\u0142da"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych", "product": "P\u0142atnik", "versions": [{"status": "affected", "changes": [{"at": "metric 334", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "10.02.002"}], "defaultStatus": "unaffected"}], "datePublic": "2026-10-30T00:00:00.000Z", "references": [{"url": "https://cert.pl/posts/2026/10/CVE-2026-110970", "tags": ["third-party-advisory"]}, {"url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 1.0.3"}, "descriptions": [{"lang": "en", "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\n\n\n\nThis issue was fixed\u00a0in metric\u00a0334\u00a0in version 10.02.002.", "supportingMedia": [{"type": "text/html", "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.<br><div><br></div><div>This issue was fixed<span>&nbsp;</span><span>in metric&nbsp;</span>334<span>&nbsp;in version 10.02.002.</span></div>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-603", "description": "CWE-603 Use of Client-Side authentication"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "10.02.002", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2026-11-03T09:13:32.724Z"}}}, "cveMetadata": {"cveId": "CVE-2026-110972", "state": "PUBLISHED", "dateUpdated": "2026-11-03T09:13:32.724Z", "dateReserved": "2026-10-15T10:24:54.756Z", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "datePublished": "2026-10-30T11:56:49.582Z", "assignerShortName": "CERT-PL"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "P\u0142atnik", "vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych", "versions": [{"changes": [{"at": "metric 334", "status": "unaffected"}], "lessThanOrEqual": "10.02.002", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cvd@cert.pl"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\n\n\n\nThis issue was fixed\u00a0in metric\u00a0334\u00a0in version 10.02.002."}], "id": "CVE-2026-110972", "lastModified": "2026-11-03T10:17:13.670", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cvd@cert.pl", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-110972", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T15:26:06.783259Z", "version": "2.0.3"}}]}, "published": "2026-10-30T12:16:34.803", "references": [{"source": "cvd@cert.pl", "url": "https://cert.pl/posts/2026/10/CVE-2026-110970"}, {"source": "cvd@cert.pl", "url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik"}], "sourceIdentifier": "cvd@cert.pl", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-603"}], "source": "cvd@cert.pl", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,10.02.002]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "P\u0142atnik", "source": "cna", "vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych"}, "product": "p_atnik", "vendor": "zak_ad_ubezpiecze_spo_ecznych"}], "created": "2026-10-30T13:30:12.679130+00:00", "updated": "2026-11-03T11:00:15.378667+00:00", "vendors": ["zak_ad_ubezpiecze_spo_ecznych", "zak_ad_ubezpiecze_spo_ecznych$PRODUCT$p_atnik"]}