PT-2023-30915 · Unknown · Codeigniter Shield
Kenjis
·
Published
2023-11-23
·
Updated
2023-11-30
·
CVE-2023-48708
CVSS v3.1
5.0
Medium
| Vector | AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
CodeIgniter Shield versions prior to 1.0.0-beta.8
Description
CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions, successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person views the data in the log table, they can obtain a raw token, which can then be used to send a request with that user's authority. This issue affects users of
tokens, jwt, and hmac authenticators when logging successful login attempts.Recommendations
For versions prior to 1.0.0-beta.8, upgrade to Shield v1.0.0-beta.8 or later.
As a temporary workaround, disable logging for successful login attempts by setting
ConfigAuthToken::$recordLoginAttempt to Auth::RECORD LOGIN ATTEMPT FAILURE or Auth::RECORD LOGIN ATTEMPT NONE for AccessTokens or HmacSha256, and ConfigAuthJWT::$recordLoginAttempt to Auth::RECORD LOGIN ATTEMPT FAILURE or Auth::RECORD LOGIN ATTEMPT NONE for JWT.Exploit
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Codeigniter Shield