What’s Vulnerable › Vulnerabilities

CVE-2017-18486

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-09 · updated 2026-06-17
• Weakness: CWE-332

Description

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.

Affected products

• jitbit Helpdesk: before 9.0.3 — fixed in 9.0.3

How to fix

Upgrade to a fixed version: jitbit Helpdesk 9.0.3. Check the vendor advisory for mitigations.

References

• https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html
• https://www.exploit-db.com/exploits/42776
• https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day
• https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html
• https://www.exploit-db.com/exploits/42776
• https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day

Get alerted when CVE-2017-18486 or the next vulnerability affects your stack