Improper Privilege Management in Tourism-Management-System User Register

Executive Summary

This vulnerability is in the Tourism-Management-System's user registration endpoint. It allows remote attackers to create administrator accounts without proper validation by manipulating the UsersEntity argument. The flaw stems from improper privilege management in the /users/register endpoint, where no authentication or authorization checks are enforced before inserting user data into the administrator role table.

Useful 0 Not Useful 0

Detection Guidance

Check if the /users/register endpoint is publicly accessible by sending a POST request with a JSON payload containing a username and password. If the response grants administrative privileges without authentication, the system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain full administrative access to the system. This would allow them to perform unauthorized actions like modifying user data, accessing sensitive information, or disrupting system operations. The publicly available exploit increases the risk of real-world attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive user data, violating GDPR's data protection requirements and HIPAA's security rules. Unauthorized administrative access may result in data breaches, non-compliance with access control regulations, and potential legal consequences for affected organizations.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the patch from commit 84d8ec384f669df3985293dab293bb7b477efa64 to enforce proper role checks on the /users/register endpoint and remove @IgnoreAuth annotations from unauthorized endpoints.

Useful 0 Not Useful 0