{"id":375,"date":"2023-08-12T14:21:46","date_gmt":"2023-08-12T14:21:46","guid":{"rendered":"https:\/\/nobugescapes.com\/?p=375"},"modified":"2023-08-13T03:04:19","modified_gmt":"2023-08-13T03:04:19","slug":"raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx","status":"publish","type":"post","link":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/","title":{"rendered":"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX"},"content":{"rendered":"\n<p><a href=\"https:\/\/portal.microfocus.com\/s\/article\/KM000018804?language=en_US\">CVE-2023-32260<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Product &amp; Service Introduction:<\/h3>\n\n\n\n<p>OpenText <a href=\"https:\/\/www.microfocus.com\/en-us\/portfolio\/it-service-management\">SMAX <\/a>is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Technical Description:<\/h3>\n\n\n\n<p>Security vulnerability has been identified within the ITSM component of OpenText SMAX. This vulnerability, due to an authorization flaw, allows authenticated users to submit requests under the names of others. Given that the system syncs with Active Directory, assigning unique IDs to users, exploitation of this flaw can enable unauthorized request modifications or manipulations on behalf of unsuspecting users.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps to Reproduce:<\/h3>\n\n\n\n<p><strong>Start the Submission Process:<\/strong> Log into the ITSM System using an Active Directory account and select a request type. In this example, we&#8217;ll use \u201clocal admin account.\u201d<\/p>\n\n\n\n<p><strong>Prepare Request:<\/strong> Click on the request interface to input any title and justification for the request.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-4.png\" alt=\"\" class=\"wp-image-377\" width=\"304\" height=\"215\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-4.png 415w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-4-300x213.png 300w\" sizes=\"(max-width: 304px) 100vw, 304px\" \/><\/figure>\n\n\n\n<p><strong>Intercept and Modify:<\/strong> Using a proxy tool, such as \u201cburp suite,\u201d intercept the request being sent.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-5-1024x509.png\" alt=\"\" class=\"wp-image-378\" width=\"477\" height=\"237\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-5-1024x509.png 1024w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-5-300x149.png 300w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-5-768x382.png 768w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-5.png 1225w\" sizes=\"(max-width: 477px) 100vw, 477px\" \/><\/figure>\n\n\n\n<p><strong>Impersonate a Target:<\/strong> Within the intercepted request, change the User ID to your intended target&#8217;s ID and then forward the request.<\/p>\n\n\n\n<p>Post submission, the victim won&#8217;t receive any email notification, thereby remaining unaware of this unauthorized activity. <\/p>\n\n\n\n<p><strong>How to a user Identifier?<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"499\" src=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-6-1024x499.png\" alt=\"\" class=\"wp-image-379\" srcset=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-6-1024x499.png 1024w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-6-300x146.png 300w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-6-768x374.png 768w, https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-6.png 1188w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Solution \u2013 Fix &amp; Patch:<\/h3>\n\n\n\n<p>Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of SMAX\/AMX\/HCMX:<\/p>\n\n\n\n<ul>\n<li>SMAX 2023.05.P1<\/li>\n<\/ul>\n\n\n\n<p><a href=\"https:\/\/docs.microfocus.com\/doc\/SMAX\/2023.05\/202305P1\">https:\/\/docs.microfocus.com\/doc\/SMAX\/2023.05\/202305P1<\/a><\/p>\n\n\n\n<ul>\n<li>AMX 2023.05.P1<\/li>\n<\/ul>\n\n\n\n<p><a href=\"https:\/\/docs.microfocus.com\/doc\/AMX\/2023.05\/202305P1\">https:\/\/docs.microfocus.com\/doc\/AMX\/2023.05\/202305P1<\/a><\/p>\n\n\n\n<ul>\n<li>HCMX 2023.05.P1<\/li>\n<\/ul>\n\n\n\n<p><a href=\"https:\/\/docs.microfocus.com\/doc\/HCMX\/2023.05\/202305P1\">https:\/\/docs.microfocus.com\/doc\/HCMX\/2023.05\/202305P1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2023-32260 Product &amp; Service Introduction: OpenText SMAX is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere. Technical Description: Security vulnerability has been identified [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[9],"tags":[5],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -\" \/>\n<meta property=\"og:description\" content=\"CVE-2023-32260 Product &amp; Service Introduction: OpenText SMAX is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere. Technical Description: Security vulnerability has been identified [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-12T14:21:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-13T03:04:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-4.png\" \/>\n<meta name=\"author\" content=\"Turki\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Turki\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/\",\"url\":\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/\",\"name\":\"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -\",\"isPartOf\":{\"@id\":\"https:\/\/nobugescapes.com\/#website\"},\"datePublished\":\"2023-08-12T14:21:46+00:00\",\"dateModified\":\"2023-08-13T03:04:19+00:00\",\"author\":{\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be\"},\"breadcrumb\":{\"@id\":\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nobugescapes.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nobugescapes.com\/#website\",\"url\":\"https:\/\/nobugescapes.com\/\",\"name\":\"\",\"description\":\"No Bug Escapes\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nobugescapes.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be\",\"name\":\"Turki\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nobugescapes.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g\",\"caption\":\"Turki\"},\"sameAs\":[\"https:\/\/nobugescapes.com\"],\"url\":\"https:\/\/nobugescapes.com\/author\/turki\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/","og_locale":"en_US","og_type":"article","og_title":"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -","og_description":"CVE-2023-32260 Product &amp; Service Introduction: OpenText SMAX is comprehensive service management software that delivers efficient IT Service Management (ITSM), IT Asset Management (ITAM), and Enterprise Service Management (ESM). Powered by embedded analytics and machine learning, it is easy to use, easy to extend, and easy to run anywhere. Technical Description: Security vulnerability has been identified [&hellip;]","og_url":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/","article_published_time":"2023-08-12T14:21:46+00:00","article_modified_time":"2023-08-13T03:04:19+00:00","og_image":[{"url":"https:\/\/nobugescapes.com\/wp-content\/uploads\/2023\/08\/image-4.png"}],"author":"Turki","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Turki","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/","url":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/","name":"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX -","isPartOf":{"@id":"https:\/\/nobugescapes.com\/#website"},"datePublished":"2023-08-12T14:21:46+00:00","dateModified":"2023-08-13T03:04:19+00:00","author":{"@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be"},"breadcrumb":{"@id":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nobugescapes.com\/blog\/raise-a-request-on-behalf-of-other-users-vulnerability-in-smax-amx-hcmx\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nobugescapes.com\/"},{"@type":"ListItem","position":2,"name":"Raise a request on behalf of other users Vulnerability in\u00a0SMAX\/AMX\/HCMX"}]},{"@type":"WebSite","@id":"https:\/\/nobugescapes.com\/#website","url":"https:\/\/nobugescapes.com\/","name":"","description":"No Bug Escapes","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nobugescapes.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/57e251ce8a555429d986eddcc794e2be","name":"Turki","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nobugescapes.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4f25df09dc99e8e956c6f78fb406471d?s=96&d=mm&r=g","caption":"Turki"},"sameAs":["https:\/\/nobugescapes.com"],"url":"https:\/\/nobugescapes.com\/author\/turki\/"}]}},"_links":{"self":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/375"}],"collection":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/comments?post=375"}],"version-history":[{"count":3,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/375\/revisions"}],"predecessor-version":[{"id":382,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/posts\/375\/revisions\/382"}],"wp:attachment":[{"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/media?parent=375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/categories?post=375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nobugescapes.com\/wp-json\/wp\/v2\/tags?post=375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}