CVE-2023-1065 Auth bypass in Snyk Kubernetes Monitor
Unauthenticated attackers can post irrelevant data to Snyk organizations if they know the Integration ID, potentially obscuring real security issues.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1065?
CVE-2023-1065 is a medium-severity authentication bypass vulnerability in Snyk Kubernetes Monitor, published on 28 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploit the vulnerability the attacker does not need to be authenticated to Snyk but does need to know the target's Integration ID (which may or may not be the same as the Organization ID, although this is an unpredictable UUID in either case).
Weakness: CWE-287
Which versions are affected by CVE-2023-1065?
It affects 1 product.
Products include Snyk Kubernetes Monitor.
How do I fix CVE-2023-1065?
No fix has been published for CVE-2023-1065 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-1065 being exploited?
There is no known exploitation of CVE-2023-1065 in the wild and no public exploit code.
Sources
Also known as GHSA-8mxq-fgcq-vh7j.