PT-2023-30529 · Datahub · Datahub

Amit-Laish + 1 · Published 2023-11-14 · Updated 2023-11-22 · CVE-2023-47640

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions DataHub versions prior to 0.11.1

Description The issue concerns the use of a SHA-1 HMAC with a short key length for signing session tokens in DataHub Frontend, making it vulnerable to brute force attacks by sufficiently resourced actors. An authenticated attacker could exploit this to obtain escalated privileges by generating a privileged session cookie. The vulnerability is exacerbated by the default settings of the Play LegacyCookiesModule and the shorter than recommended key length for the signing key.

Recommendations For versions prior to 0.11.1, update to the latest helm chart and rotate the session signing secret to resolve the issue.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2023-47640

GHSA-FG9X-WVQW-6GMW

Affected Products

Datahub

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47640.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-47640 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47640 · Security Note
• https://github.com/datahub-project/datahub/security/advisories/GHSA-fg9x-wvqw-6gmw · Note
• https://t.me/latest_high_impact_cve/93 · Telegram Post