CVE-2022-31011 TiDB authentication bypass vulnerability

What is CVE-2022-31011?

CVE-2022-31011 is a high-severity authentication bypass vulnerability in pingcap tidb, published on 31 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies include turning off Security Enhanced Mode (SEM), disabling local login for non-root accounts, and ensuring that the same IP cannot be logged in as root and normal user at the same time.

Weakness: CWE-287

Which versions are affected by CVE-2022-31011?

6 open source packages ship an affected version, including github.com/pingcap/tidb. It affects 1 product.

Products include Pingcap Tidb.

How do I fix CVE-2022-31011?

Upgrade github.com/pingcap/tidb to a fixed version for your release line: 0.0.0-20220221072141-27ffd1126da1, 1.1.0-beta.0.20220221072141-27ffd1126da1 or 5.3.1.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-31011 being exploited?

There is no known exploitation of CVE-2022-31011 in the wild and no public exploit code.

Other vulnerabilities in pingcap tidb

• CVE-2024-41433 Memory corruption in n/a Critical 9.8
• CVE-2024-35618 Null dereference in n/a High 7.5
• CVE-2022-34969 Null dereference in n/a High 7.5
• CVE-2024-33809 Memory corruption in n/a Medium 6.5
• CVE-2024-41434 Denial of service in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4whx-7p29-mq22.