Runzero

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

The Baseboard Management Controller (BMC) fails to correctly enforce encryption and integrity requirements for IPMI commands. This allows an attacker to send crafted packets to execute arbitrary commands on active RMCP+ (Remote Management Control Protocol Plus) sessions without requiring authentication.

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC

An authorization bypass exists in the MCP service. This issue is an instance of Authorization Bypass Through User-Controlled Key, which occurs when an application uses a user-supplied input to access a resource without properly verifying if the user is authorized to access that specific resource.

An issue involving improper privilege management allows a dashboard configuration to be viewed from outside the authorized organization scope.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260202.0 Description A flaw allowed MCP agents to access remediation and asset information outside of authorized organizational boundaries. This is categorized as incorrect authorization. Recommendations Update to version 4.0.260202.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260203.0 Description A flaw exists that may allow a user with existing credentials to view sensitive information through an API response. This is categorized as CWE-200: Exposure of Sensitive Information to an Unauthorized Actor. Recommendations Update to version 4.0.260203.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260203.0 Description A flaw exists that could prevent session inactivity timeouts from triggering due to automatic page reloading. This is due to insufficient control of resources after expiration or release. Recommendations Update to version 4.0.260203.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260203.0 Description An issue allowed administrators to create and update users outside of their authorized organization scope. This is an instance of CWE-863: Incorrect Authorization. Recommendations Update to version 4.0.260203.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260203.0 Description A flaw allowed MCP agents to access certificate information beyond their authorized organizational boundaries. This is categorized as CWE-863: Incorrect Authorization. Recommendations Update to version 4.0.260203.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260204.2 Description A security issue allows an authorized user to view clear-text secrets for certain credential types and fields. Recommendations Update to version 4.0.260204.2 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260205.0 Description The software contains an authorization issue that could expose task information outside of the authorized organization. This is due to incorrect authorization (CWE-863). Recommendations Update to version 4.0.260205.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.260206.0 Description The software contains an authorization issue that could expose records outside of the authorized organization scope through the MCP endpoints. The issue is classified as CWE-863: Incorrect Authorization. Recommendations Update to version 4.0.260206.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Explorer versions prior to 4.0.260208.0 Description A flaw exists that could allow unauthorized access to Explorer groups. This is due to incorrect authorization. Recommendations Update to version 4.0.260208.0 or later.

Name of the Vulnerable Software and Affected Versions runZero Platform versions prior to 4.0.26021.0 Description A flaw exists that could permit unauthorized modification and use of credentials outside the intended organizational boundaries. This is categorized as CWE-863: Incorrect Authorization. Recommendations Update to version 4.0.26021.0 or later.