Session Termination Flaw in Koollab LMS

Executive Summary

This vulnerability is an improper access control issue in Koollab LMS. It allows an unauthenticated attacker to forcibly end any user's session by providing their email address through the login kickout endpoint. This results in a denial of service for the affected user.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for unusual session terminations or failed login attempts targeting specific email addresses. Check server logs for repeated requests to the login kickout endpoint with user emails. No specific commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could disrupt your access to Koollab LMS by logging you out unexpectedly. It does not steal data or allow unauthorized access but can cause inconvenience and potential loss of work.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may impact compliance by disrupting service availability, which could affect data processing activities under GDPR or HIPAA. However, it does not directly expose or compromise data, so the impact is likely limited to availability concerns.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update Koollab LMS to the latest patched version. If an update is unavailable, restrict access to the login kickout endpoint via firewall rules or disable it temporarily. Monitor logs for exploitation attempts.

Useful 0 Not Useful 0