PT-2023-30529 · Datahub · Datahub

Amit-Laish + 1 · Publicado 2023-11-14 · Atualizado 2023-11-22 · CVE-2023-47640

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions DataHub versions prior to 0.11.1

Description The issue concerns the use of a SHA-1 HMAC with a short key length for signing session tokens in DataHub Frontend, making it vulnerable to brute force attacks by sufficiently resourced actors. An authenticated attacker could exploit this to obtain escalated privileges by generating a privileged session cookie. The vulnerability is exacerbated by the default settings of the Play LegacyCookiesModule and the shorter than recommended key length for the signing key.

Recommendations For versions prior to 0.11.1, update to the latest helm chart and rotate the session signing secret to resolve the issue.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2023-47640

GHSA-FG9X-WVQW-6GMW

Produtos afetados

Datahub

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47640.json · Exploit
• https://github.com/datahub-project/datahub/security/advisories/GHSA-fg9x-wvqw-6gmw · Nota
• https://osv.dev/vulnerability/CVE-2023-47640 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-47640 · Nota de Segurança
• https://t.me/latest_high_impact_cve/93 · Publicação no Telegram