Iteaj iBoot IoT Gateway Password Manipulation Vulnerability in Admin Interface

A vulnerability exists in the Iteaj iBoot IoT Gateway version 1.1.3, specifically within the Admin Password Handler component. The issue arises in the '/core/admin/pwd' file, where improper access controls allow low-privileged users to change passwords for administrators or other users. This vulnerability can be exploited remotely, leading to unauthorized access.

Impact

Exploitation of this vulnerability allows low-privileged users to gain administrative access by changing the admin password.

Reproduction

To reproduce this vulnerability, send a POST request to the '/core/admin/pwd' endpoint with a payload that includes the 'id' parameter set to a target user's ID and the 'password' and 'surePassword' fields set to the new password. This request must include a valid session cookie for authentication. Once the password is changed, log in with the new credentials to access the admin account.