PT-2023-25706 · Sealos · Sealos

Dvkunion · Published 2023-06-30 · Updated 2023-07-10 · CVE-2023-36815

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Sealos versions 4.2.0 and prior

Description Sealos, a Cloud Operating System for managing cloud-native applications, has a permission flaw in its billing system. This flaw allows users to control the recharge resource account via the sealos.io/v1/Payment endpoint, enabling them to recharge any amount of 1 renminbi (RMB). The charging interface may expose resource information, and the namespace of this custom resource is under the user's control, potentially allowing permission to correct it.

Recommendations For Sealos versions 4.2.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the sealos.io/v1/Payment endpoint to minimize the risk of exploitation. Additionally, avoid using the custom resource associated with this endpoint until the issue is resolved.

Exploit

Improper Authentication

Missing Authorization

Weakness Enumeration

CWE-287

CWE-862

Related Identifiers

CVE-2023-36815

GHSA-VPXF-Q44G-W34W

Affected Products

Sealos

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36815.json · Exploit
• https://osv.dev/vulnerability/GHSA-vpxf-q44g-w34w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36815 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36815 · Vendor Advisory
• https://github.com/labring/sealos/security/advisories/GHSA-vpxf-q44g-w34w · Note
• https://github.com/labring/sealos · Note
• https://t.me/cibsecurity/65875 · Telegram Post