PT-2022-16910 · Gocd · Gocd-Ldap-Authentication-Plugin+1

Chadlwilson + 1 · Published 2022-04-11 · Updated 2022-04-19 · CVE-2022-24832

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GoCD versions prior to 22.1.0

Description The issue affects the gocd-ldap-authentication-plugin bundled with the GoCD Server, which fails to correctly escape special characters when using the username to construct LDAP queries. This allows an existing LDAP-authenticated GoCD user with malicious intent to construct and execute malicious queries, enabling them to deduce facts about other users or entries within the LDAP database through brute force mechanisms. The issue only affects users with a working LDAP authorization configuration enabled on their GoCD server and is exploitable by users authenticating using such an LDAP configuration.

Recommendations For versions prior to 22.1.0, update to GoCD 22.1.0, which is bundled with gocd-ldap-authentication-plugin v2.2.0-144, to resolve the issue. As a temporary workaround, consider restricting access to the LDAP authentication configuration to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2022-24832

GHSA-X5V3-X9QJ-MH3H

Affected Products

Gocd

Gocd-Ldap-Authentication-Plugin

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24832.json · Exploit
• https://github.com/gocd/gocd/pull/10244 · Patch
• https://github.com/gocd/gocd-ldap-authentication-plugin/commit/87fa7dac5d899b3960ab48e151881da4793cfcc3 · Patch
• https://osv.dev/vulnerability/CVE-2022-24832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24832 · Security Note
• https://gocd.org/releases/#22-1-0 · Vendor Advisory
• https://docs.gocd.org/22.1.0/configuration/dev_authentication.html#ldapad-authentication · Vendor Advisory
• https://github.com/gocd/gocd/security/advisories/GHSA-x5v3-x9qj-mh3h · Note
• https://github.com/gocd/gocd/releases/tag/22.1.0 · Note
• https://github.com/gocd/gocd-ldap-authentication-plugin · Note
• https://github.com/gocd/gocd-ldap-authentication-plugin/releases/tag/v2.2.0-144 · Note
• https://t.me/cibsecurity/40506 · Telegram Post