CVE-2020-10793: CodeIgniter Improper Privilege Management
Summary
CVE-2020-10793: CodeIgniter Improper Privilege Management. Affects codeigniter4/framework versions < 4.0.0. No fix is published. How to fix ↓
Also tracked for
- codeigniter · Bitnami
The same CVE-2020-10793 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
CodeIgniter is a popular PHP framework used for developing web applications. It provides a range of features and libraries to simplify the development process. However, CodeIgniter versions up to 4.0.0 are vulnerable to an improper privilege management issue. This vulnerability allows remote attackers to gain elevated privileges by manipulating the Email ID on the 'Select Role of the User' page. It is important to note that CodeIgniter itself does not provide a login screen or user management facilities beyond a Session library. The vulnerability is attributed to a custom module or plugin developed on top of CodeIgniter, rather than the framework itself.
Vulnerability Detail
The vulnerability in CodeIgniter allows attackers to exploit the privilege management system and gain unauthorized access to sensitive resources. By modifying the Email ID on the 'Select Role of the User' page, an attacker can elevate their privileges and perform actions reserved for higher privileged users. This can lead to unauthorized data access, modification, or even complete system compromise. The severity of this vulnerability is rated as HIGH with a CVSS score of 8.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability is attributed to a custom module or plugin, there is no specific workaround provided. However, it is advised to disable or remove the affected module or plugin until a fix is available. This will mitigate the risk of exploitation.
Conclusion
CodeIgniter versions up to 4.0.0 are vulnerable to an improper privilege management issue. This vulnerability allows remote attackers to gain elevated privileges by manipulating the Email ID on the 'Select Role of the User' page. It is crucial to review and update any custom modules or plugins responsible for the privilege management issue. Implementing strong authentication mechanisms and following least privilege principles will help protect your application. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for codeigniter4/framework →
FAQ
No, CodeIgniter does not provide a login screen or user management facilities beyond a Session library. The vulnerability is attributed to a custom module or plugin developed on top of CodeIgniter.
With elevated privileges, an attacker can access sensitive data, modify system configurations, perform unauthorized actions, and potentially compromise the entire system.
To protect your application, ensure that any custom modules or plugins are thoroughly reviewed and audited for privilege management issues. Implement strong authentication mechanisms and follow least privilege principles throughout your application.
There are no known public exploits for this vulnerability at the time of this report. However, it is important to address the issue promptly to mitigate the risk of exploitation.
For more information, you can refer to the GitHub Security Advisory GHSA-jwqp-wh5g-4gmm or reach out to info@devnack.com for further support on vulnerability remediation.
Related vulnerabilities
Recent vulnerabilities recorded for codeigniter4/framework.
