Improper authentication in Sympa - CVE-2024-55919

Vulnerability identifier: #VU101798

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-55919

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in the generic SSO login feature. A remote attacker can bypass authentication process with an arbitrary email address and gain unauthorized access to the application.

Sympa
Fedora
Ubuntu
sympa (Ubuntu package)
sympa

Install updates from vendor's website.

Sympa - update to 6.2.74
sympa (Ubuntu package) - addressed in versions 6.1.24~dfsg-1ubuntu0.1~esm1, 6.2.24~dfsg-1ubuntu0.1~esm2, 6.2.40~dfsg-4ubuntu0.20.04.1~esm2, 6.2.66~dfsg-2ubuntu0.1~esm1, 6.2.70~dfsg-2+deb12u1build0.24.04.1
sympa - addressed in versions 6.2.74-1.el8, 6.2.74-1.el9, 6.2.74-1.el10_0, 6.2.74-1.fc40, 6.2.74-1.fc41

• https://www.sympa.community/security/2024-001.html
• https://github.com/sympa-community/sympa/releases/tag/6.2.74

• Authentication bypass in Sympa
• Fedora EPEL 9 update for sympa
• Fedora EPEL 8 update for sympa
• Fedora 41 update for sympa
• Fedora 40 update for sympa
• Fedora EPEL 10.0 update for sympa
• Ubuntu update for sympa