CVE-2024-3164

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3164
In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System Maintenance → Tools portlet. This would share database username and password under Log Files and download DB Dump and other dotCMS Content under Tools. Nothing in the System → Maintenance should be displayed for users with site admin role. Only system admins must have access to System Maintenance. OWASP Top 10 - A01) Broken Access Control OWASP Top 10 - A04) Insecure Design

4.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/dotCMS/core/issues/27909 Issue Tracking
https://github.com/dotCMS/core/pull/27912 Issue Tracking
https://www.dotcms.com/security/SI-69 Broken Link
https://github.com/dotCMS/core/issues/27909 Issue Tracking
https://github.com/dotCMS/core/pull/27912 Issue Tracking
https://www.dotcms.com/security/SI-69 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:1:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:2:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:3:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:4:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:5:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:6:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:7:*:*:lts:*:*:*
History

27 Jun 2025, 14:06

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:dotcms:dotcms:23.10.24:2:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:1:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:5:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:4:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:6:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:7:*:*:lts:*:*:*
cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
cpe:2.3:a:dotcms:dotcms:23.10.24:3:*:*:lts:*:*:*
First Time Dotcms dotcms
Dotcms
References () https://github.com/dotCMS/core/issues/27909 - () https://github.com/dotCMS/core/issues/27909 - Issue Tracking
References () https://github.com/dotCMS/core/pull/27912 - () https://github.com/dotCMS/core/pull/27912 - Issue Tracking
References () https://www.dotcms.com/security/SI-69 - () https://www.dotcms.com/security/SI-69 - Broken Link

21 Nov 2024, 09:29

Type Values Removed Values Added
References () https://github.com/dotCMS/core/issues/27909 - () https://github.com/dotCMS/core/issues/27909 -
References () https://github.com/dotCMS/core/pull/27912 - () https://github.com/dotCMS/core/pull/27912 -
References () https://www.dotcms.com/security/SI-69 - () https://www.dotcms.com/security/SI-69 -

30 Sep 2024, 16:15

Type Values Removed Values Added
CWE CWE-552 CWE-284

26 Jul 2024, 14:15

Type Values Removed Values Added
References
  • {'url': 'https://auth.dotcms.com/security/SI-69', 'source': 'security@dotcms.com'}
  • () https://www.dotcms.com/security/SI-69 -

25 Jul 2024, 21:15

Type Values Removed Values Added
Summary (en) In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System Maintenance → Tools portlet. This would share database username and password under Log Files and download DB Dump and other dotCMS Content under Tools. Nothing in the System → Maintenance should be displayed for users with site admin role. Only system admins must have access to System Maintenance. OWASP Top 10 - A01) Broken Access Control OWASP Top 10 - A04) Insecure Design (en) In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System Maintenance → Tools portlet. This would share database username and password under Log Files and download DB Dump and other dotCMS Content under Tools. Nothing in the System → Maintenance should be displayed for users with site admin role. Only system admins must have access to System Maintenance. OWASP Top 10 - A01) Broken Access Control OWASP Top 10 - A04) Insecure Design
References
  • {'url': 'https://auth.dotcms.com/security/SI-69?token=dc1f0241-b697-41dd-8140-154658e90c54', 'source': 'security@dotcms.com'}
  • () https://auth.dotcms.com/security/SI-69 -

01 Apr 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-01 22:15

Updated : 2025-06-27 14:06

NVD link : CVE-2024-3164

Mitre link : CVE-2024-3164

CVE.ORG link : CVE-2024-3164

JSON object : View

Products Affected

dotcms

  • dotcms
CWE
CWE-284

Improper Access Control

NVD-CWE-noinfo