PT-2023-30775 · Unknown · Capsule-Proxy

Luisdavim + 1 · Publicado 2023-11-24 · Atualizado 2024-08-21 · CVE-2023-48312

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions capsule-proxy versions prior to 0.4.6

Description The issue is a privilege escalation vulnerability based on a missing check if the user is authenticated based on the TokenReview result. This affects clusters running with the anonymous-auth Kubernetes API Server setting disabled (set to false), allowing bypass of the token review mechanism and interaction with the upper Kubernetes API Server. The vulnerability cannot be exploited if relying only on client certificates (SSL/TLS).

Recommendations For versions prior to 0.4.6, upgrade to version 0.4.6 to address the vulnerability. As a temporary workaround, consider disabling the anonymous-auth feature or restricting access to the capsule-proxy until the issue is resolved. Restrict access to the Kubernetes API Server to minimize the risk of exploitation. Avoid using empty tokens in the Authorization header until the issue is resolved.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-48312

GHSA-FPVW-6M5V-HQFP

GO-2023-2351

Produtos afetados

Capsule-Proxy

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48312.json · Exploit
• 🔥 https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp · Exploit
• https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823 · Correção
• https://github.com/projectcapsule/capsule-proxy · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-48312 · Nota de Segurança
• https://osv.dev/vulnerability/GO-2023-2351 · Aviso do Fabricante
• https://t.me/cvenotify/61239 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-fpvw-6m5v-hqfp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-48312 · Aviso do Fabricante