Horizon Alert
Summary of the vulnerability and why it matters
This critical vulnerability in MphRx's Minerva allows an authenticated user to change another user's profile details, like their email. This could lead to a full account takeover and compromise sensitive information.
- Affects authenticated users.
- Can lead to account takeover.
- Impacts user data integrity.
Attack Path
How an attacker could exploit the issue
An authenticated user can abuse this IDOR to modify other users' profile information. They could change an email address and then use the password reset function to gain full account takeover.
- Authenticated user access required.
- Targets user profile update endpoint.
- Account takeover is the goal.
Live Threat
Current exploitation, exposure, and threat context
This insecure direct object reference (IDOR) vulnerability allows authenticated users to modify other users' information and potentially take over their accounts. While this could lead to significant damage within an organization, attackers generally prefer vulnerabilities that do not require prior authentication, as they offer broader access.
- Requires authenticated access.
- Exploitation is manual or needs custom tool.
- Target is enterprise software.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize isolating or taking services offline if the MphRx Minerva V3.6.0 application is in use, as this IDOR vulnerability allows authenticated users to compromise other accounts. Teams should immediately investigate their asset inventory for instances of Minerva V3.6.0 and assess their exposure. If affected systems cannot be immediately patched or isolated, focus on stringent access controls and enhanced monitoring.
- Identify and isolate affected Minerva instances.
- Block or strictly limit access to the '/minerva/user/updateUserProfile' endpoint.
- Monitor for unauthorized user profile modifications.
