PT-2018-6764 · Authentikat · Authentikat-Jwt

Anfedorov · Publicado 2018-03-18 · Atualizado 2019-10-03 · CVE-2017-18239

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: authentikat-jwt versions 0.4.5 and earlier

Description: A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests.

Recommendations: For versions 0.4.5 and earlier, consider disabling the JsonWebToken.validate method until a patch is available. Restrict access to the JsonWebToken validation process to minimize the risk of exploitation. Avoid using the JsonWebToken validation for critical authentication processes until the issue is resolved.

Correção

Identificadores relacionados

CVE-2017-18239

GHSA-3RHM-67J6-42JQ

Produtos afetados

Authentikat-Jwt

Referências · 8

• https://github.com/jasongoodwin/authentikat-jwt · Nota
• https://github.com/jasongoodwin/authentikat-jwt/commit/2d2fa0d40ac8f2f7aa7e9b070fa1a25eee082cb0 · Correção
• https://github.com/jasongoodwin/authentikat-jwt/issues/12 · Nota
• https://github.com/jasongoodwin/authentikat-jwt/pull/36 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18239 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-18239 · Aviso do Fabricante
• https://github.com/advisories/GHSA-3rhm-67j6-42jq · Nota
• https://osv.dev/vulnerability/GHSA-3rhm-67j6-42jq · Aviso do Fabricante