Executive brief
CentreStack is a file-sharing and management platform used by IT service providers to give clients remote access to data. A security flaw allows unauthorized individuals to manipulate their session data by sending specially crafted web requests. This could allow an attacker to bypass security checks and gain access to administrative management pages, potentially compromising client data or system settings.
Technical details
A session variable injection vulnerability exists in CentreStack versions prior to 17.4 due to improper input sanitization in the custom session serialization format. An unauthenticated attacker can inject arbitrary session variables by embedding newline and tab characters into the 'AccountName' parameter sent to the 'SelectProvider.aspx' endpoint. By injecting a 'resellerid' session variable, an attacker can bypass the 'IsValidRSession' authentication check. This allows unauthorized access to management pages and potentially other restricted administrative functions. The issue is addressed in version 17.4.
Affected products
- Gladinet CentreStack before 17.4
Timeline
- 2026-07-30: advisory: Advisory published by VulnCheck and NVD