CVE-2024-24554: Bludit - Insecure Token Generation

Description

Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the API token and the user token. This allows attackers to authenticate against the Bludit API.

Scores

CVSS scores of CVE-2024-24554, by who scored it
Scored by	CVSS	Score	Vector
NCSC.chCNA (assigner)	4.0	Medium6.0	CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
NVDNVD · Analyzed	4.0	Medium6.0	CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.24% · top 85% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.0.

Weakness

CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (opens in a new tab)All about CWE-338 and its CVEs
CWE-287 Improper Authentication (opens in a new tab)All about CWE-287 and its CVEs

Affected products

Bludit · Bludit
- affected 2.0

What to do

Solution: Generating secure API and user auth tokens in PHP involves creating unique and cryptographically secure strings that can be used as tokens for authentication purposes. The following code snippet is a basic example of how to generate secure API tokens in PHP: ```php function generateApiToken($length = 32) { $token = bin2hex(random_bytes($length)); return $token; } ```

Workaround: Disable API.

References (1)

https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/ (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2024-24554](https://trackcve.app/badge/CVE-2024-24554.svg)](https://trackcve.app/cve/CVE-2024-24554)

Record last updated 1 Aug 2024, 23:19 UTC.