PT-2022-24846 · Unknown · Matrix-Nio

Lowpoljar · Published 2022-09-29 · Updated 2023-07-13 · CVE-2022-39254

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions matrix-nio versions prior to 0.20

Description The issue arises when a user requests a room key from their devices. The software remembers the request but fails to check the origin of the forwarded room key, allowing homeservers to potentially insert room keys of questionable validity and mount an impersonation attack.

Recommendations For versions prior to 0.20, update to version 0.20 to resolve the issue. As a temporary workaround, consider restricting the acceptance of forwarded room keys to only those that are responses to previous requests and match the device the key was requested from.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-322

Related Identifiers

CVE-2022-39254

GHSA-W4PR-4VJG-HFFH

Affected Products

Matrix-Nio

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39254.json · Exploit
• https://github.com/poljar/matrix-nio/commit/b1cbf234a831daa160673defd596e6450e9c29f0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-39254 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-39254 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-39254 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39254 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w4pr-4vjg-hffh · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-39254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39254 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-39254 · Vendor Advisory
• https://github.com/poljar/matrix-nio/security/advisories/GHSA-w4pr-4vjg-hffh · Note
• https://github.com/poljar/matrix-nio · Note
• https://t.me/cvenotify/54294 · Telegram Post
• https://t.me/cibsecurity/50733 · Telegram Post