microCLAUDIA Improper Access Control Vulnerability Allowing Unauthorized Actions on Other Organizations' Systems

An improper access control vulnerability has been identified in microCLAUDIA versions through 3.2.0. This vulnerability allows authenticated users to perform unauthorized actions on the systems of other organizations by sending direct API requests. Exploitation involves using organization identifiers obtained from a compromised endpoint or deduced manually. The flaw enables access between tenants, allowing attackers to list and manage remote assets, uninstall agents, and delete vaccine configurations.

Impact

Exploitation of this vulnerability could lead to unauthorized access and actions on other organizations' systems, including management of assets and deletion of critical configurations.

Remediation

Users can upgrade to microCLAUDIA version 3.2.2, where this vulnerability has been fixed.