CVE-2017-18239 Exposure of Sensitive information in authentikat-jwt
An attacker can bypass JWT signature validation by exploiting a timing side-channel to guess the signature bit-by-bit.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-18239?
CVE-2017-18239 is a critical vulnerability in n/a, published on 18 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests.
Which versions are affected by CVE-2017-18239?
2 open source packages ship an affected version, including com.jason-goodwin:authentikat-jwt_2.12. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.jason-goodwin:authentikat-jwt_2.12 Maven | All versions | 0.4.6 |
com.jason-goodwin:authentikat-jwt_2.12 Maven | All versions | 0.4.6 |
Products include Authentikat-Jwt Project Authentikat-Jwt.
How do I fix CVE-2017-18239?
Upgrade com.jason-goodwin:authentikat-jwt_2.12 to 0.4.6 or later.
Is CVE-2017-18239 being exploited?
There is no known exploitation of CVE-2017-18239 in the wild and no public exploit code.
Sources
Also known as GHSA-3rhm-67j6-42jq.