Auth bypass in Sage Xrt Treasury
CVE-2017-3183
Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determined by the USER_CODE field associated with the querying user. By modifying the USER_CODE value to match that of a privileged user, a low-privileged, authenticated user may gain privileged access to the SQL database. A remote, authenticated user can submit specially crafted SQL queries to gain privileged access to the application database.
Vulnerability class: IDOR (Insecure Direct Object Reference)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.021 (80.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 80.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: -0.000
Affected products
- Sage Xrt Treasury — versions 3
- Sage Xrt Treasury — versions 3.0
Weakness classification (CWE)
References
- www.kb.cert.org/vuls/id/742632 (US Government Resource, Third Party Advisory, third-party-advisory)
- www.securityfocus.com/bid/96477 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-3183?
- CVE-2017-3183 is a high-severity vulnerability in Sage Xrt Treasury, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 8.8/10. Published 2018-07-24.
- How severe is CVE-2017-3183?
- High severity. CVSS v3 base score is 8.8 out of 10.