CVE-2024-57726

SimpleHelp Missing Authorization Vulnerability

Simplehelp

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

16. Jan 2025

Ausgewertete Quellen

• Hinweis
  https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
• Hinweis
  https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57726
• CISA
  SimpleHelp Missing Authorization Vulnerability
• NVD
  CVE-2024-57726