CVE-2017-18486
CVE-2017-18486 is a high-severity vulnerability in Jitbit Helpdesk with a CVSS 3.x base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-332.
Key facts
- Severity: High (CVSS 3.x base score 7.2)
- CVSS v2: 6.5
- EPSS exploit prediction: 5% (91st percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-332
- Affected product: Jitbit Helpdesk
- Published:
- Last modified:
Description
Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
Frequently asked questions
- What is CVE-2017-18486?
- Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
- How severe is CVE-2017-18486?
- CVE-2017-18486 has a CVSS 3.x base score of 7.2, rated high severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2017-18486 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (91st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2017-18486?
- CVE-2017-18486 affects Jitbit Helpdesk. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2017-18486?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2017-18486 published?
- CVE-2017-18486 was published on 2019-08-09 and last updated on 2026-06-17.
References
- https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass
- https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html
- https://www.exploit-db.com/exploits/42776
- https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day
Affected products (1)
- cpe:2.3:a:jitbit:helpdesk:*:*:*:*:*:*:*:*
Other CWE-332 vulnerabilities
- CVE-2018-9057 — Critical (CVSS 9.8): aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through…
- CVE-2016-10743 — High (CVSS 7.5): hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.
- CVE-2014-9690 — High (CVSS 7.5): Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute…
- CVE-2016-9154 — High (CVSS 7.5): Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D,…
- CVE-2026-3290 — High (CVSS 7.4): Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- CVE-2019-1715 — Medium (CVSS 5.3): A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG),…