PT-2023-17685 · Unknown · Cloud Foundry+1

Felix Hambrecht · Publicado 2023-05-19 · Atualizado 2025-01-21 · CVE-2023-20881

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions 1.140 through 1.152.0 loggregator-agent version 7 and later

Description The issue allows users to override other users' syslog drain credentials if they are aware of the client certificate used for that syslog drain. This applies even if the drain has zero certificates, enabling the user to override the private key and add or modify a certificate authority used for the connection.

Recommendations For Cloud Foundry versions 1.140 through 1.152.0, restrict access to the syslog drain configuration to prevent unauthorized modifications. For loggregator-agent version 7 and later, consider disabling the syslog drain feature until a fix is available to prevent credential overrides. Avoid using the same client certificate for multiple syslog drains to minimize the risk of exploitation.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2023-20881

Produtos afetados

Cloud Foundry

Loggregator-Agent

Referências · 3

• https://osv.dev/vulnerability/CVE-2023-20881 · Aviso do Fabricante
• https://cloudfoundry.org/blog/cve-2023-20881-cas-for-syslog-drain-mtls-feature-can-be-overwritten · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-20881 · Nota de Segurança