CVE-2024-2045 - OpenCVE

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://fluidattacks.com/advisories/newman/
https://github.com/oxen-io/session-android/

History

No history.

MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2024-02-29T23:37:37.339Z

Updated: 2024-08-01T19:03:37.761Z

Reserved: 2024-02-29T23:31:27.739Z

Link: CVE-2024-2045

Vulnrichment

Updated: 2024-08-01T19:03:37.761Z

NVD

Status : Awaiting Analysis

Published: 2024-03-01T00:15:52.493

Modified: 2024-03-01T14:04:26.010

Link: CVE-2024-2045

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-2045", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "state": "PUBLISHED", "assignerShortName": "Fluid Attacks", "dateReserved": "2024-02-29T23:31:27.739Z", "datePublished": "2024-02-29T23:37:37.339Z", "dateUpdated": "2024-08-01T19:03:37.761Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Session", "vendor": "Session", "versions": [{"status": "affected", "version": "1.17.5"}]}], "datePublic": "2024-02-29T23:33:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<div><div>Session version 1.17.5 allows obtaining internal application files and public</div><div>files from the user's device without the user's consent. This is possible</div><div>because the application is vulnerable to Local File Read via chat attachments.</div></div><br>"}], "value": "Session version 1.17.5 allows obtaining internal application files and public\n\nfiles from the user's device without the user's consent. This is possible\n\nbecause the application is vulnerable to Local File Read via chat attachments.\n\n\n\n\n"}], "impacts": [{"capecId": "CAPEC-131", "descriptions": [{"lang": "en", "value": "CAPEC-131 Resource Leak Exposure"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-02-29T23:37:37.339Z"}, "references": [{"url": "https://fluidattacks.com/advisories/newman/"}, {"url": "https://github.com/oxen-io/session-android/"}], "source": {"discovery": "EXTERNAL"}, "title": "Session 1.17.5 - LFR via chat attachment", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "opft", "product": "session", "cpes": ["cpe:2.3:a:opft:session:1.17.5:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "1.17.5", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-06T18:55:34.971070Z", "id": "CVE-2024-2045", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T17:52:53.454Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:03:37.761Z"}, "title": "CVE Program Container", "references": [{"url": "https://fluidattacks.com/advisories/newman/", "tags": ["x_transferred"]}, {"url": "https://github.com/oxen-io/session-android/", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fluidattacks.com/advisories/newman/", "tags": ["x_transferred"]}, {"url": "https://github.com/oxen-io/session-android/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:03:37.761Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2045", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-06T18:55:34.971070Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:opft:session:1.17.5:*:*:*:*:*:*:*"], "vendor": "opft", "product": "session", "versions": [{"status": "affected", "version": "1.17.5"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T17:52:48.405Z"}}], "cna": {"title": "Session 1.17.5 - LFR via chat attachment", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-131", "descriptions": [{"lang": "en", "value": "CAPEC-131 Resource Leak Exposure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Session", "product": "Session", "versions": [{"status": "affected", "version": "1.17.5"}], "defaultStatus": "unaffected"}], "datePublic": "2024-02-29T23:33:00.000Z", "references": [{"url": "https://fluidattacks.com/advisories/newman/"}, {"url": "https://github.com/oxen-io/session-android/"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Session version 1.17.5 allows obtaining internal application files and public\n\nfiles from the user's device without the user's consent. This is possible\n\nbecause the application is vulnerable to Local File Read via chat attachments.\n\n\n\n\n", "supportingMedia": [{"type": "text/html", "value": "<div><div>Session version 1.17.5 allows obtaining internal application files and public</div><div>files from the user's device without the user's consent. This is possible</div><div>because the application is vulnerable to Local File Read via chat attachments.</div></div><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-02-29T23:37:37.339Z"}}}, "cveMetadata": {"cveId": "CVE-2024-2045", "state": "PUBLISHED", "dateUpdated": "2024-08-01T19:03:37.761Z", "dateReserved": "2024-02-29T23:31:27.739Z", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "datePublished": "2024-02-29T23:37:37.339Z", "assignerShortName": "Fluid Attacks"}, "dataVersion": "5.1"}