PT-2021-4587 · Redmine · Redmine

Niubl · Published 2021-03-26 · Updated 2024-03-06 · CVE-2021-31866

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Redmine versions 4.0.0 through 4.0.8 Redmine versions 4.1.0 through 4.1.2

Description The issue is related to a timing difference in string comparison operations within SysController and MailHandlerController, allowing an attacker to learn internal authentication key values. This can be exploited by a remote attacker to access confidential data.

Recommendations For Redmine versions 4.0.0 through 4.0.8, update to version 4.0.9 or later. For Redmine versions 4.1.0 through 4.1.2, update to version 4.1.3 or later. As a temporary workaround, consider restricting access to the SysController and MailHandlerController to minimize the risk of exploitation.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

BDU:2021-05266

BIT-REDMINE-2021-31866

CVE-2021-31866

DLA-2658-1

Affected Products

Redmine

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2021-31866 · Security Note
• https://ubuntu.com/security/CVE-2021-31866 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05266 · Security Note
• https://osv.dev/vulnerability/BIT-redmine-2021-31866 · Vendor Advisory
• https://redmine.org/projects/redmine/wiki/Security_Advisories · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-31866 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2658-1 · Vendor Advisory
• https://redmine.org/news/131 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31866 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-31866 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31866 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-31866 · Security Note
• https://t.me/cvenotify/13839 · Telegram Post