PT-2023-25706 · Sealos · Sealos

Dvkunion · Publicado 2023-06-30 · Atualizado 2023-07-10 · CVE-2023-36815

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Sealos versions 4.2.0 and prior

Description Sealos, a Cloud Operating System for managing cloud-native applications, has a permission flaw in its billing system. This flaw allows users to control the recharge resource account via the sealos.io/v1/Payment endpoint, enabling them to recharge any amount of 1 renminbi (RMB). The charging interface may expose resource information, and the namespace of this custom resource is under the user's control, potentially allowing permission to correct it.

Recommendations For Sealos versions 4.2.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the sealos.io/v1/Payment endpoint to minimize the risk of exploitation. Additionally, avoid using the custom resource associated with this endpoint until the issue is resolved.

Exploit

Improper Authentication

Missing Authorization

Enumeração de Fraquezas

CWE-287

CWE-862

Identificadores relacionados

CVE-2023-36815

GHSA-VPXF-Q44G-W34W

Produtos afetados

Sealos

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36815.json · Exploit
• https://github.com/labring/sealos/security/advisories/GHSA-vpxf-q44g-w34w · Nota
• https://github.com/labring/sealos · Nota
• https://t.me/cibsecurity/65875 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-vpxf-q44g-w34w · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-36815 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-36815 · Aviso do Fabricante