PT-2023-7055 · Apache · Apache Mina

Andrew Pikler · Published 2023-07-10 · Updated 2024-01-19 · CVE-2023-35887

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache MINA versions 1.0 through 2.9.3

Description The issue is related to the exposure of sensitive information to unauthorized actors in Apache MINA SSHD SFTP servers that use a RootedFileSystem. Logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

Recommendations For Apache MINA versions 1.0 through 2.9.3, upgrade to version 2.10 to resolve the issue. As a temporary workaround, consider restricting access to the RootedFileSystem to minimize the risk of exploitation.

Fix

Path traversal

Information Disclosure

Weakness Enumeration

CWE-22

CWE-200

Related Identifiers

BDU:2023-08077

CVE-2023-35887

GHSA-MJMQ-GWGM-5QHM

OESA-2024-1079

RHSA-2023:7637

RHSA-2023:7638

RHSA-2023:7639

RHSA-2024:1192

RHSA-2024:1193

Affected Products

Apache Mina

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2023-35887 · Security Note
• https://osv.dev/vulnerability/CVE-2023-35887 · Vendor Advisory
• https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mjmq-gwgm-5qhm · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1079 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08077 · Security Note
• https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0 · Note
• https://github.com/apache/mina-sshd · Note
• https://github.com/apache/mina-sshd/pull/362 · Note
• https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b · Note
• https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 · Note
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1079 · Note
• https://t.me/cibsecurity/66258 · Telegram Post
• https://github.com/advisories/GHSA-mjmq-gwgm-5qhm · Note
• https://issues.apache.org/jira/browse/SSHD-1324 · Note