CVE-2022-36089CWE-294

VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay

High · published September 7, 2022

CVSS v3.1
8.2
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

KubeVela is an application delivery platform Users using KubeVela's VelaUX APIServer could be affected by an authentication bypass vulnerability. In KubeVela prior to versions 1.4.11 and 1.5.4, VelaUX APIServer uses the `PlatformID` as the signed key to generate the JWT tokens for users. Another API called `getSystemInfo` exposes the platformID. This vulnerability allows users to use the platformID to re-generate the JWT tokens to bypass the authentication. Versions 1.4.11 and 1.5.4 contain a patch for this issue.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00873 · 58.5th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2022-09-07T23:00Z
EPSS history
Timeline
  • 07 SEP 23:00Z
    VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay
    cvelistv5