PT-2023-17685 · Unknown · Cloud Foundry+1

Felix Hambrecht · Published 2023-05-19 · Updated 2025-01-21 · CVE-2023-20881

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions 1.140 through 1.152.0 loggregator-agent version 7 and later

Description The issue allows users to override other users' syslog drain credentials if they are aware of the client certificate used for that syslog drain. This applies even if the drain has zero certificates, enabling the user to override the private key and add or modify a certificate authority used for the connection.

Recommendations For Cloud Foundry versions 1.140 through 1.152.0, restrict access to the syslog drain configuration to prevent unauthorized modifications. For loggregator-agent version 7 and later, consider disabling the syslog drain feature until a fix is available to prevent credential overrides. Avoid using the same client certificate for multiple syslog drains to minimize the risk of exploitation.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2023-20881

Affected Products

Cloud Foundry

Loggregator-Agent

References · 3

• https://osv.dev/vulnerability/CVE-2023-20881 · Vendor Advisory
• https://cloudfoundry.org/blog/cve-2023-20881-cas-for-syslog-drain-mtls-feature-can-be-overwritten · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20881 · Security Note