PT-2023-12728 · Unknown · Scs-Library-Client+1

Trudg · Published 2023-01-17 · Updated 2024-06-20 · CVE-2022-23538

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions scs-library-client versions prior to 1.3.4 and 1.4.2

Description The HTTP Authorization header sent by the scs-library-client to the library service may be incorrectly leaked to an S3 backing storage provider when pulling a container image with authentication. This occurs in a specific flow where the library service redirects the client to a backing S3 storage server for a multi-part concurrent download. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable flow is only used when communicating with a Singularity Enterprise 1.x installation or a third-party server implementing this flow.

Recommendations Update to scs-library-client version 1.3.4 or 1.4.2 to fix the security issue. For users interacting with a Singularity Enterprise 1.x installation using a 3rd party S3 storage service, revoke and recreate authentication tokens within Singularity Enterprise. As a temporary measure, consider avoiding the use of the multi-part concurrent download flow with redirect to S3 until the issue is resolved.

Exploit

Fix

Insufficiently Protected Credentials

Open Redirect

Weakness Enumeration

CWE-522

CWE-601

Related Identifiers

CVE-2022-23538

GHSA-7P8M-22H4-9PJ7

GO-2023-1497

OPENSUSE-SU-2024:12694-1

OPENSUSE-SU-2024:14059-1

Affected Products

Singularity Enterprise

Scs-Library-Client

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23538.json · Exploit
• https://github.com/sylabs/scs-library-client/commit/b5db2aacba6bf1231f42dd475cc32e6355ab47b2 · Patch
• https://github.com/sylabs/scs-library-client/commit/eebd7caaab310b1fa803e55b8fc1acd9dcd2d00c · Patch
• https://github.com/sylabs/scs-library-client/commit/68ac4cab5cda0afd8758ff5b5e2e57be6a22fcfa · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-23538 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23538 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-23538 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14059-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7p8m-22h4-9pj7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23538 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12694-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23538 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1497 · Vendor Advisory
• https://github.com/sylabs/scs-library-client/security/advisories/GHSA-7p8m-22h4-9pj7 · Note
• https://github.com/sylabs/scs-library-client · Note