{"id":366,"date":"2023-08-12T13:56:31","date_gmt":"2023-08-12T13:56:31","guid":{"rendered":"https:\/\/nobugescapes.com\/?p=366"},"modified":"2023-08-13T03:05:51","modified_gmt":"2023-08-13T03:05:51","slug":"smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users","status":"publish","type":"post","link":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/","title":{"rendered":"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users"},"content":{"rendered":"\n<p><a href=\"https:\/\/portal.microfocus.com\/s\/article\/KM000018804?language=en_US\">CVE-2023-32259<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Product &amp; Service Introduction:<\/h3>\n\n\n\n<p>OpenText <a href=\"https:\/\/www.microfocus.com\/en-us\/portfolio\/it-service-management\">SMAX <\/a>is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Technical Description:<\/h3>\n\n\n\n<p>A security vulnerability exists within the ITSM component of OpenText SMAX. This vulnerability, stemming from an authorization flaw, permits authenticated users to submit Ideas under the names of other users without the necessary permissions. The system&#8217;s integration with Active Directory, which assigns unique IDs to each user, does not adequately verify the authorization of the submitting user.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps to Reproduce:<\/h3>\n\n\n\n<p><strong>Initiate the Submission Process:<\/strong> Log into the ITSM System using your account and select \u201cSuggest idea.\u201d<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1024x167.png\" alt=\"\" class=\"wp-image-369\" width=\"505\" height=\"82\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1024x167.png 1024w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-300x49.png 300w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-768x125.png 768w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image.png 1037w\" sizes=\"(max-width: 505px) 100vw, 505px\" \/><\/figure>\n\n\n\n<p><strong>Intercept and Modify the Request:<\/strong> Using a proxy tool intercept the submission request.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1.png\" alt=\"\" class=\"wp-image-370\" width=\"372\" height=\"237\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1.png 534w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1-300x191.png 300w\" sizes=\"(max-width: 372px) 100vw, 372px\" \/><\/figure>\n\n\n\n<p><strong>Impersonate a Target:<\/strong> Modify the User ID field with your target&#8217;s unique ID and forward the request.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-2.png\" alt=\"\" class=\"wp-image-371\" width=\"513\" height=\"149\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-2.png 962w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-2-300x88.png 300w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-2-768x224.png 768w\" sizes=\"(max-width: 513px) 100vw, 513px\" \/><\/figure>\n\n\n\n<p>Post-submission, the target user doesn&#8217;t receive any notification, keeping them unaware.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-3.png\" alt=\"\" class=\"wp-image-372\" width=\"504\" height=\"263\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-3.png 960w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-3-300x157.png 300w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-3-768x402.png 768w\" sizes=\"(max-width: 504px) 100vw, 504px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Solution \u2013 Fix &amp; Patch:<\/h3>\n\n\n\n<p>Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of SMAX\/AMX:<\/p>\n\n\n\n<ul>\n<li>SMAX 2023.05<\/li>\n<\/ul>\n\n\n\n<p><a href=\"https:\/\/docs.microfocus.com\/doc\/SMAX\/2023.05\/Upgrade\">https:\/\/docs.microfocus.com\/doc\/SMAX\/2023.05\/Upgrade<\/a><\/p>\n\n\n\n<ul>\n<li>AMX 2023.05<\/li>\n<\/ul>\n\n\n\n<p>&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<a target=\"_blank\" href=\"https:\/\/docs.microfocus.com\/doc\/AMX\/2023.05\/Upgrade\" rel=\"noreferrer noopener\">https:\/\/docs.microfocus.com\/doc\/AMX\/2023.05\/Upgrade<\/a><br>If updating to the 2023.05 version is impossible, please click the link below to apply an alternative solution immediately.<\/p>\n\n\n\n<ul>\n<li><a target=\"_blank\" href=\"https:\/\/portal.microfocus.com\/s\/article\/KM000018646\" rel=\"noreferrer noopener\">https:\/\/portal.microfocus.com\/s\/article\/KM000018646<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2023-32259 Product &amp; Service Introduction: OpenText SMAX is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere. Technical Description: A security vulnerability exists within [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[9],"tags":[5],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -<\/title>\n<meta name=\"description\" content=\"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -\" \/>\n<meta property=\"og:description\" content=\"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-12T13:56:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-13T03:05:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1024x167.png\" \/>\n<meta name=\"author\" content=\"Turki\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Turki\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/\",\"url\":\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/\",\"name\":\"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -\",\"isPartOf\":{\"@id\":\"https:\/\/nobugescapes.com\/#website\"},\"datePublished\":\"2023-08-12T13:56:31+00:00\",\"dateModified\":\"2023-08-13T03:05:51+00:00\",\"author\":{\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be\"},\"description\":\"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.\",\"breadcrumb\":{\"@id\":\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nobugescapes.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nobugescapes.com\/#website\",\"url\":\"https:\/\/nobugescapes.com\/\",\"name\":\"\",\"description\":\"No Bug Escapes\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nobugescapes.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be\",\"name\":\"Turki\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g\",\"caption\":\"Turki\"},\"sameAs\":[\"https:\/\/nobugescapes.com\"],\"url\":\"https:\/\/nobugescapes.com\/author\/turki\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -","description":"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/","og_locale":"en_US","og_type":"article","og_title":"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -","og_description":"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.","og_url":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/","article_published_time":"2023-08-12T13:56:31+00:00","article_modified_time":"2023-08-13T03:05:51+00:00","og_image":[{"url":"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-1024x167.png"}],"author":"Turki","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Turki","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/","url":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/","name":"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users -","isPartOf":{"@id":"https:\/\/nobugescapes.com\/#website"},"datePublished":"2023-08-12T13:56:31+00:00","dateModified":"2023-08-13T03:05:51+00:00","author":{"@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be"},"description":"CVE-2023-32259 | Vulnerability has been identified in SMAX\/AMX. The vulnerability could be exploited by authenticated product users to submit Idea records without proper authorization.","breadcrumb":{"@id":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nobugescapes.com\/blog\/smax-amx-vulnerability-submit-ideas-on-behalf-of-other-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nobugescapes.com\/"},{"@type":"ListItem","position":2,"name":"SMAX\/AMX VULNERABILITY Submit Ideas on behalf of other users"}]},{"@type":"WebSite","@id":"https:\/\/nobugescapes.com\/#website","url":"https:\/\/nobugescapes.com\/","name":"","description":"No Bug Escapes","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nobugescapes.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be","name":"Turki","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g","caption":"Turki"},"sameAs":["https:\/\/nobugescapes.com"],"url":"https:\/\/nobugescapes.com\/author\/turki\/"}]}},"_links":{"self":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/366"}],"collection":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/comments?post=366"}],"version-history":[{"count":4,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/366\/revisions"}],"predecessor-version":[{"id":384,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/366\/revisions\/384"}],"wp:attachment":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/media?parent=366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/categories?post=366"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/tags?post=366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}