Baseweb JSite Apache Druid Monitoring Console Access Control Vulnerability

A critical access control vulnerability has been identified in Baseweb JSite version 1.0, specifically within the Apache Druid Monitoring Console. The issue arises in the file '/druid/index.html', where improper access controls allow unauthorized users to access sensitive interfaces without authentication. This vulnerability can be exploited remotely, potentially leading to unauthorized access to confidential information.

Impact

Exploitation of this vulnerability allows for unauthorized access to the Apache Druid Monitoring Console, where sensitive information can be accessed without authentication.

Reproduction

To reproduce this vulnerability, access the '/druid/index.html' path on a JSite 1.0 installation. No authentication is required, and the vulnerability can be exploited remotely.