PT-2023-3287 · Unknown+1 · Opensearch+1

Bbarani · Published 2023-05-08 · Updated 2023-06-15 · CVE-2023-31141

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 1.3.10 and 2.7.0

Description The issue is related to the implementation of fine-grained access control rules, including document-level security, field-level security, and field masking. These rules are not correctly applied to queries during extremely rare race conditions, potentially leading to incorrect access authorization. This issue can be triggered when two concurrent requests land on the same instance exactly when query cache eviction happens, which occurs once every four hours.

Recommendations For versions prior to 1.3.10, update to version 1.3.10 or later. For versions prior to 2.7.0, update to version 2.7.0 or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2023-03424

CVE-2023-31141

GHSA-G8XC-6MF7-H28H

Affected Products

Opensearch

Red Os

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31141.json · Exploit
• https://github.com/opensearch-project/security/security/advisories/GHSA-g8xc-6mf7-h28h · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31141 · Security Note
• https://osv.dev/vulnerability/GHSA-g8xc-6mf7-h28h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-31141 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31141 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03424 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-31141 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://github.com/opensearch-project/security · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-opensearch-cve-2023-31141 · Note
• https://vuldb.com/ru/?id.228281 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31141 · Note
• https://t.me/cvenotify/49998 · Telegram Post