Incorrect Access Control in Cohere North AI v1.1.5

Executive Summary

This vulnerability is an incorrect access control issue in Cohere North AI v1.1.5. It allows attackers to overwrite user information by sending a specially crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for unauthorized POST or PUT requests to the /api/internal/v1/users/{{USER_ID}} endpoint. Check server logs for suspicious activity targeting this path. Use tools like curl to test if the endpoint allows unauthorized modifications by sending crafted requests.

Useful 0 Not Useful 0

Impact Analysis

Attackers could exploit this to modify user data, potentially leading to unauthorized changes in accounts, loss of data integrity, or impersonation of users. This could affect confidentiality, integrity, and availability of user information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to violations of GDPR (data integrity and confidentiality) and HIPAA (unauthorized access to protected health information). Organizations may face legal penalties, loss of trust, and increased regulatory scrutiny.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update Cohere North AI to the latest version to address the incorrect access control issue. Restrict network access to the /api/internal/v1/users/ endpoint and monitor for unusual requests targeting user IDs.

Useful 0 Not Useful 0