PT-2022-20561 · Unknown · Flyteadmin

Mayitbeegh · Published 2022-07-13 · Updated 2022-07-30 · CVE-2022-31145

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FlyteAdmin versions 1.1.30 and prior

Description The issue concerns the improper validation of access tokens, allowing authenticated users who use an external identity provider to continue using Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin as the OAuth2 Authorization Server are unaffected by this issue.

Recommendations For FlyteAdmin versions 1.1.30 and prior, as a temporary workaround, consider rotating signing keys immediately to invalidate all open sessions and force all users to attempt to obtain new tokens. Continue to rotate keys until FlyteAdmin has been upgraded. Additionally, hide the FlyteAdmin deployment ingress URL from the internet. Once a patch is available, upgrade to the patched version on the master branch of the repository.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-298

CWE-613

Related Identifiers

CVE-2022-31145

GHSA-QWRJ-9HMP-GPXH

GO-2022-0519

Affected Products

Flyteadmin

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31145.json · Exploit
• https://github.com/flyteorg/flyteadmin/pull/455 · Patch
• https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a · Patch
• https://osv.dev/vulnerability/CVE-2022-31145 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31145 · Security Note
• https://osv.dev/vulnerability/GO-2022-0519 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qwrj-9hmp-gpxh · Vendor Advisory
• https://github.com/flyteorg/flyteadmin/security/advisories/GHSA-qwrj-9hmp-gpxh · Note
• https://github.com/flyteorg/flyteadmin · Note
• https://github.com/flyteorg/flyteadmin/releases/tag/v1.1.31 · Note
• https://pkg.go.dev/vuln/GO-2022-0519 · Note
• https://t.me/cvenotify/33060 · Telegram Post
• https://t.me/cvenotify/33031 · Telegram Post
• https://t.me/cibsecurity/46208 · Telegram Post