CVE-2022-36089 VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay
Attackers can bypass authentication in VelaUX APIServer by using the exposed PlatformID to forge JWT tokens, gaining unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-36089?
CVE-2022-36089 is a high-severity authentication bypass vulnerability in kubevela, published on 7 Sep 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
KubeVela is an application delivery platform Users using KubeVela's VelaUX APIServer could be affected by an authentication bypass vulnerability. In KubeVela prior to versions 1.4.11 and 1.5.4, VelaUX APIServer uses the `PlatformID` as the signed key to generate the JWT tokens for users. Another API called `getSystemInfo` exposes the platformID. This vulnerability allows users to use the platformID to re-generate the JWT tokens to bypass the authentication. Versions 1.4.11 and 1.5.4 contain a patch for this issue.
Weakness: CWE-294
Which versions are affected by CVE-2022-36089?
It affects 1 product.
Products include Kubevela Kubevela.
How do I fix CVE-2022-36089?
No fix has been published for CVE-2022-36089 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-36089 being exploited?
There is no known exploitation of CVE-2022-36089 in the wild and no public exploit code.
Sources
Also known as GHSA-cq42-w295-r29q.