CVE-2022-31733 Auth bypass in Cloud Foundry Diego and CF Deployment
Attackers can bypass mTLS authentication to access Cloud Foundry applications via unproxied ports when specific security features are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-31733?
CVE-2022-31733 is a critical authentication bypass vulnerability in Cloud Foundry Diego and CF Deployment, published on 3 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another port on diego cells, allowing application ingress without a client certificate. If mTLS route integrity is enabled AND unproxied ports are turned off, then an attacker could connect to an application that should be only reachable via mTLS, without presenting a client certificate.
Weakness: CWE-295
Which versions are affected by CVE-2022-31733?
It affects 2 products.
Products include Cloudfoundry Cf-Deployment, Cloudfoundry Diego.
How do I fix CVE-2022-31733?
No fix has been published for CVE-2022-31733 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-31733 being exploited?
There is no known exploitation of CVE-2022-31733 in the wild and no public exploit code.
Other vulnerabilities in Cloud Foundry Diego and CF Deployment
- CVE-2020-5402 UAA fails to check the state parameter when authenticating with external IDPs
- CVE-2019-11293 UAA logs all query parameters with debug logging level
- CVE-2019-11290 Cloud Foundry UAA logs query parameters in tomcat access file
- CVE-2019-11283 Password leak in smbdriver logs
- CVE-2018-1191 Information disclosure in Garden-runC
Sources
Also known as GHSA-cxh3-vwqp-fxrv.