PT-2018-8620 · Cisco · Node-Jose

Zi0Black · Published 2018-01-04 · Updated 2022-05-13 · CVE-2018-0114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Cisco node-jose versions prior to 0.11.0

Description: A security issue exists due to the node-jose library following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs), which allows a JSON Web Key (JWK) representing a public key to be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects, removing the original signature, adding a new public key to the header, and then signing the object using the associated private key.

Recommendations: For versions prior to 0.11.0, update to version 0.11.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of JSON Web Tokens (JWTs) that contain embedded public keys until a patch is applied. Avoid trusting public keys embedded in JWS headers to minimize the risk of exploitation.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2018-0114

GHSA-JFXM-W8G2-4RCV

Affected Products

Node-Jose

References · 12

• 🔥 https://github.com/zi0Black/POC-CVE-2018-0114 · Exploit
• 🔥 https://github.com/j4k0m/CVE-2018-0114 · Exploit
• 🔥 https://github.com/Eremiel/CVE-2018-0114 · Exploit
• 🔥 https://exploit-db.com/exploits/44324 · Exploit
• https://osv.dev/vulnerability/GHSA-jfxm-w8g2-4rcv · Vendor Advisory
• https://tools.cisco.com/security/center/viewAlert.x?alertId=56326 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0114 · Security Note
• https://github.com/cisco/node-jose · Note
• https://github.com/cisco/node-jose/blob/master/CHANGELOG.md · Note
• https://web.archive.org/web/20210124130907/http://securityfocus.com/bid/102445 · Note
• http://securityfocus.com/bid/102445 · Note