PT-2021-19856 · Tenvoy · Tenvoy

Published 2021-06-16 · Updated 2021-06-28 · CVE-2021-32685

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tEnvoy versions prior to 7.0.3

Description The verifyWithMessage method of tEnvoyNaClSigningKey always returns true for any signature that has a SHA-512 hash matching the SHA-512 hash of the message, even if the signature is invalid. This issue is patched in version 7.0.3.

Recommendations For versions prior to 7.0.3, upgrade to version 7.0.3 immediately to resolve this issue. As a temporary workaround, in tenvoy.js under the verifyWithMessage method definition within the tEnvoyNaClSigningKey class, ensure that the return statement call to this.verify ends in .verified. Reverify any signatures that were previously verified with the vulnerable verifyWithMessage method.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2021-32685

GHSA-5W25-HXP5-H8C9

GHSA-7R96-8G3X-G36M

Affected Products

Tenvoy

References · 9

• https://github.com/TogaTech/tEnvoy/commit/a121b34a45e289d775c62e58841522891dee686b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-32685 · Security Note
• https://osv.dev/vulnerability/GHSA-5w25-hxp5-h8c9 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7r96-8g3x-g36m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32685 · Vendor Advisory
• https://github.com/TogaTech/tEnvoy · Note
• https://github.com/TogaTech/tEnvoy/security/advisories/GHSA-7r96-8g3x-g36m · Note
• https://github.com/TogaTech/tEnvoy/releases/tag/v7.0.3 · Note
• https://t.me/cvenotify/16424 · Telegram Post