CVE-2023-38334

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis libraries can be unlocked, and thus further analyzed and modified by Omnis Studio. This allows for further analyzing and also deleting, viewing, changing, copying, renaming, duplicating, or printing previously locked Omnis classes. This violates the expected behavior of an "irreversible operation."

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://packetstormsecurity.com/files/173696/Omnis-Studio-10.22.00-Library-Unlock.html	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Jul/42	Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43	Not Applicable
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-006.txt	Third Party Advisory
http://packetstormsecurity.com/files/173696/Omnis-Studio-10.22.00-Library-Unlock.html	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Jul/42	Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43	Not Applicable
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-006.txt	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:omnis:studio:10.22.00:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-07-20 18:15

Updated : 2024-11-21 08:13

NVD link : CVE-2023-38334

Mitre link : CVE-2023-38334

CVE.ORG link : CVE-2023-38334

JSON object : View

Products Affected

omnis

studio

CWE

NVD-CWE-Other CWE-276

Incorrect Default Permissions

{"id": "CVE-2023-38334", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2023-07-20T18:15:12.170", "references": [{"url": "http://packetstormsecurity.com/files/173696/Omnis-Studio-10.22.00-Library-Unlock.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2023/Jul/42", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2023/Jul/43", "tags": ["Not Applicable"], "source": "cve@mitre.org"}, {"url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-006.txt", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.com/files/173696/Omnis-Studio-10.22.00-Library-Unlock.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2023/Jul/42", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2023/Jul/43", "tags": ["Not Applicable"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-006.txt", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis libraries can be unlocked, and thus further analyzed and modified by Omnis Studio. This allows for further analyzing and also deleting, viewing, changing, copying, renaming, duplicating, or printing previously locked Omnis classes. This violates the expected behavior of an \"irreversible operation.\""}], "lastModified": "2024-11-21T08:13:21.303", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:omnis:studio:10.22.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F011FFF-439D-435F-BFAC-DDC84CAFFA20"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}