PT-2023-24770 · Unknown+2 · Doorkeeper+2

Hickford + 1 · Published 2023-06-12 · Updated 2024-12-09 · CVE-2023-34246

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Doorkeeper versions prior to 5.6.6

Description The issue concerns Doorkeeper, an OAuth 2 provider for Ruby on Rails and Grape, which automatically processes authorization requests without user consent for public clients that have been previously approved. Public clients are inherently vulnerable to impersonation, as their identity cannot be assured. This behavior contradicts the OAuth RFC 8252, which states that the authorization server should not process authorization requests automatically without user consent or interaction, except when the identity of the client can be assured.

Recommendations For versions prior to 5.6.6, update to version 5.6.6 to resolve the issue. As a temporary workaround, consider disabling automatic processing of authorization requests for public clients until the update is applied. Restrict access to public clients to minimize the risk of impersonation. Avoid relying solely on previous approvals for public clients, and ensure user consent is obtained for each authorization request.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-34246

DLA-3494-1

DLA-3989-1

GHSA-7W2C-W47H-789W

USN-6210-1

Affected Products

Doorkeeper

Linuxmint

Ubuntu

References · 24

• 🔥 https://github.com/doorkeeper-gem/doorkeeper/issues/1589 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34246.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doorkeeper/CVE-2023-34246.yml · Exploit
• https://github.com/doorkeeper-gem/doorkeeper/security/advisories/GHSA-7w2c-w47h-789w · Vendor Advisory
• https://github.com/doorkeeper-gem/doorkeeper/pull/1646 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-34246 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34246 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-34246 · Security Note
• https://ubuntu.com/security/notices/USN-6210-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34246 · Security Note
• https://ubuntu.com/security/CVE-2023-34246 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7w2c-w47h-789w · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3494-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-34246 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6210-1 · Vendor Advisory