INW Krbyyyzo Resource Consumption Vulnerability in Daily Huddle Site Component

A resource consumption vulnerability has been identified in INW Krbyyyzo version 25.2002, specifically within the Daily Huddle Site component. The issue arises in the file '/gbo.aspx', where the manipulation of the argument 's' leads to excessive resource usage. This vulnerability can be exploited locally and requires authentication.

Impact

Exploitation of this vulnerability causes resource exhaustion, negatively impacting the application's availability.

Reproduction

The vulnerability can be reproduced by sending a request to the '/gbo.aspx' file within the Daily Huddle Site component, using an authenticated account. The argument 's' must be manipulated with a specific input that is currently unknown, which will lead to increased resource consumption.

Remediation

It is recommended to disable the Daily Huddle Site component to mitigate this vulnerability.