admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00856
Percentile: 0.7402

CVSS Scoring

Mapped CWE(s)

• CWE-522 : Insufficiently Protected Credentials

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1552.004 : Private Keys
  Kill Chain: credential-access
• T1558.003 : Kerberoasting
  Kill Chain: credential-access
• T1543 : Create or Modify System Process
  Kill Chain: persistence
• T1021 : Remote Services
  Kill Chain: lateral-movement
• T1114.002 : Remote Email Collection
  Kill Chain: collection
• T1133 : External Remote Services
  Kill Chain: persistence
• T1078 : Valid Accounts
  Kill Chain: defense-evasion
• T1021.002 : SMB/Windows Admin Shares
  Kill Chain: lateral-movement
• T1110.004 : Credential Stuffing
  Kill Chain: credential-access
• T1550.002 : Pass the Hash
  Kill Chain: defense-evasion
• T1550.003 : Pass the Ticket
  Kill Chain: defense-evasion
• T1558 : Steal or Forge Kerberos Tickets
  Kill Chain: credential-access

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*

← Back to Home