CyberRota Analysis
AI-GeneratedCentreStack versions prior to 17.5 are vulnerable due to a hardcoded cryptographic key that allows unauthenticated attackers to forge encrypted tokens, compromising the integrity of access controls. This vulnerability can lead to unauthorized access to privileged API endpoints, enabling attackers to obtain domain administrator credentials and execute arbitrary code remotely. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for AccessTicket.Encrypt() and AccessTicket.Decrypt() across all installations. Attackers can use the hardcoded key to craft valid x-glad-auth headers and call privileged API endpoints such as acquiretenantbackuptoken to obtain a domain administrator IdentityTicket, enabling a complete unauthenticated remote code execution chain.