CVE-2024-9933
WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check
Vexday Risk Score
48Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 9.8EPSS 1.9%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
26 Oct 2024Published on NVD
05 Nov 2024Public PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' function. This makes it possible for unauthenticated attackers to log in to the WatchTowerHQ client administrator user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
watchtowerhq · WatchTowerHQpublic PoCs found — 2
githubgithub.com/RandomRobbieBF/CVE-2024-9933★ 0githubgithub.com/Nxploited/CVE-2024-9933★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →