CVE-2017-18486

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.

• CWE-332

• https://github.com/Kc57/JitBit_Helpdesk_Auth_BypassExploit, Third Party Advisory
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.htmlThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42776Exploit, Third Party Advisory, VDB Entry
• https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-dayThird Party Advisory
• https://github.com/Kc57/JitBit_Helpdesk_Auth_BypassExploit, Third Party Advisory
• https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.htmlThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42776Exploit, Third Party Advisory, VDB Entry
• https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-dayThird Party Advisory

Published

Aug 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18480cPanel before 62.0.4 does not enforce account ownership for …
• CVE-2017-18481cPanel before 62.0.4 allows stored XSS in the WHM Account Su…
• CVE-2017-18482cPanel before 62.0.4 allows resellers to use the WHM enqueue…
• CVE-2017-18483ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow …
• CVE-2017-18484Cognitoys Dino devices allow XSS via the SSID.
• CVE-2017-18485Cognitoys Dino devices allow profiles_add.html CSRF.
• CVE-2017-18487The adsense-plugin (aka Google AdSense) plugin before 1.44 f…
• CVE-2017-18488The Backup Guard plugin before 1.1.47 for WordPress has mult…
• CVE-2017-18489The contact-form-7-sms-addon plugin before 2.4.0 for WordPre…
• CVE-2017-1849Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18490The contact-form-multi plugin before 1.2.1 for WordPress has…
• CVE-2017-18491The contact-form-plugin plugin before 4.0.6 for WordPress ha…