Executive Summary

The vulnerability exists in the Wertheim SafeController Software, version 6.15.8328.28014, where the login process is supposed to restrict user access based on the IP address of a branch location.

However, the software determines the client's IP address from the HTTP X-Forwarded-For header if it is present.

An attacker who already has valid branch user credentials can manipulate this X-Forwarded-For header to spoof the expected branch IP address.

This allows the attacker to bypass the IP restriction and obtain a valid authenticated session from an unauthorized network location.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with valid user credentials to bypass IP-based access controls.

As a result, the attacker can gain unauthorized access to the system from locations that should be restricted.

This could lead to unauthorized actions within the application, potential data exposure, and compromise of branch-specific security policies.

Useful 0 Not Useful 0