CVE-2021-41111CWE-639

Authorization Bypass Through User-Controlled Key in Rundeck

Medium · published February 28, 2022

CVSS v3.1
6.4
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user with authorization to read webhooks in one project can craft a request to reveal Webhook definitions and tokens in another project. The user could use the revealed webhook tokens to trigger webhooks. Severity depends on trust level of authenticated users and whether any webhooks exist that trigger sensitive actions. There are patches for this vulnerability in versions 3.4.5 and 3.3.15. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2022-02-28T19:15Z
EPSS history
Timeline
  • 28 FEB 19:15Z
    Authorization Bypass Through User-Controlled Key in Rundeck
    cvelistv5