PT-2023-30915 · Unknown · Codeigniter Shield
Kenjis
·
Publicado
2023-11-23
·
Atualizado
2023-11-30
·
CVE-2023-48708
CVSS v3.1
5.0
Média
| Vetor | AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
CodeIgniter Shield versions prior to 1.0.0-beta.8
Description
CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions, successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person views the data in the log table, they can obtain a raw token, which can then be used to send a request with that user's authority. This issue affects users of
tokens, jwt, and hmac authenticators when logging successful login attempts.Recommendations
For versions prior to 1.0.0-beta.8, upgrade to Shield v1.0.0-beta.8 or later.
As a temporary workaround, disable logging for successful login attempts by setting
ConfigAuthToken::$recordLoginAttempt to Auth::RECORD LOGIN ATTEMPT FAILURE or Auth::RECORD LOGIN ATTEMPT NONE for AccessTokens or HmacSha256, and ConfigAuthJWT::$recordLoginAttempt to Auth::RECORD LOGIN ATTEMPT FAILURE or Auth::RECORD LOGIN ATTEMPT NONE for JWT.Exploit
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Codeigniter Shield