CVE-2024-27905 Apache Aurora: padding oracle can allow construction an authentication cookie
An unauthenticated attacker can exploit a padding oracle to forge authentication cookies, potentially leading to account takeover or remote code execution in the retired Apache Aurora project.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-27905?
CVE-2024-27905 is a critical vulnerability in Apache Aurora, published on 27 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora.
An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Weakness: CWE-200
Which versions are affected by CVE-2024-27905?
It affects 1 product.
Products include Apache Aurora.
How do I fix CVE-2024-27905?
No fix has been published for CVE-2024-27905 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-27905 being exploited?
There is no known exploitation of CVE-2024-27905 in the wild and no public exploit code.
Other vulnerabilities in Apache Aurora
Sources
Also known as GHSA-ggxq-hxrv-fq5c.