漏洞关键信息 产品信息 Vendor: Psi Probe Product: Psi Probe (Tomcat Management Application) Affected Version: <= 5.3.0 Repository: https://github.com/psi-probe/psi-probe 漏洞描述 Psi Probe versions up to and including 5.3.0 allow any authenticated user with the "probeuser" role to remove arbitrary session attributes from any other user's session through the endpoint. The application fails to validate session ownership before processing attribute removal requests, enabling low-privileged attackers to delete security-critical session attributes (such as authorization flags, MFA completion status, or role identifiers) from other users' sessions, potentially bypassing authorization controls and escalating privileges. 影响 Privilege Escalation: Remove authorization checks to gain elevated privileges Security Bypass: Eliminate MFA completion flags to bypass multi-factor authentication Access Control Subversion: Delete role attributes to circumvent role-based access controls Application Logic Manipulation: Disrupt security-critical application flows Authentication Weakening: Remove security constraints from authenticated sessions Context Corruption: Modify security context objects to alter permission sets 缓解措施 Implement ownership validation and attribute protection in Restrict attribute removal to administrators via web.xml configuration Applications should implement defense in depth with null-safe authorization checks, immutable security state, and dual verification