Vulnerability in Halo Service Solutions Haloitsm
CVE-2024-6203
HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links can be sent to existing HaloITSM users (given their email address is known). When these poisoned links get accessed (e.g. manually by the victim or automatically by an email client software), the password reset token is leaked to the malicious actor, allowing them to set a new password for the victim's account.This potentially leads to account takeover attacks.HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability.
EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L.
Affected products
- Halo Service Solutions Haloitsm — versions < 2.146.1
- Haloservicesolutions Haloitsm
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vulnerability@ncsc.ch (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-6203?
- CVE-2024-6203 is a high-severity vulnerability in Halo Service Solutions Haloitsm, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 8.3/10. Published 2024-08-06.
- How severe is CVE-2024-6203?
- High severity. CVSS v3 base score is 8.3 out of 10.
- Is CVE-2024-6203 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.