CVE-2022-45178 : Security Advisory and Response

An issue was discovered in LIVEBOX Collaboration vDesk through v018, leading to Broken Access Control vulnerabilities that could result in privilege escalation and unauthorized user creation.

Understanding CVE-2022-45178

This CVE describes the presence of Broken Access Control in specific endpoints of LIVEBOX Collaboration vDesk, allowing a malicious user to escalate privileges and perform unauthorized actions.

What is CVE-2022-45178?

The vulnerability in LIVEBOX Collaboration vDesk versions up to v018 enables a logged-in SAML user to escalate privileges to an administrative level or create new users without proper authorization.

The Impact of CVE-2022-45178

The vulnerability poses a risk of unauthorized access and privilege escalation within the LIVEBOX Collaboration vDesk platform, potentially leading to unauthorized actions and data breaches.

Technical Details of CVE-2022-45178

This section covers the specific technical aspects of the CVE.

Vulnerability Description

The Broken Access Control vulnerability exists in the /api/v1/vdeskintegration/saml/user/createorupdate, /settings/guest-settings, /settings/samlusers-settings, and /settings/users-settings endpoints.

Affected Systems and Versions

All versions of LIVEBOX Collaboration vDesk up to v018 are impacted by this vulnerability.

Exploitation Mechanism

A malicious user, already authenticated as a SAML user, can exploit the flawed access control to escalate privileges to an administrative level or create new unauthorized users.

Mitigation and Prevention

In this section, we discuss steps to mitigate and prevent exploitation of CVE-2022-45178.

Immediate Steps to Take

Update LIVEBOX Collaboration vDesk to the latest version to mitigate the vulnerability.
Monitor user activities and privilege changes within the platform.

Long-Term Security Practices

Implement regular security assessments and audits to identify access control weaknesses.
Provide security awareness training to users to prevent unauthorized actions.

Patching and Updates

Stay informed about security patches and updates released by the vendor to address known vulnerabilities.