PT-2024-11549 · Unknown · Nats Streaming Server+1

Published 2024-07-11 · Updated 2024-10-30 · CVE-2022-29946

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.8.2 NATS Streaming Server versions prior to 0.24.6

Description The issue is caused by the failure to enforce negative user permissions in one scenario, allowing a remote attacker to bypass security restrictions. By using a queue subscription on the wildcard, an attacker could exploit this to allow denied subjects.

Recommendations For NATS Server versions prior to 2.8.2, update to version 2.8.2 or later to resolve the issue. For NATS Streaming Server versions prior to 0.24.6, update to version 0.24.6 or later to resolve the issue. As a temporary workaround, consider restricting queue subscriptions on the wildcard to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-29946

GHSA-2H2X-8HH2-MFQ8

GO-2024-2980

Affected Products

Nats Server

Nats Streaming Server

References · 14

• 🔥 https://github.com/nats-io/advisories/blob/main/CVE/CVE-2022-29946.txt · Exploit
• https://osv.dev/vulnerability/GHSA-2h2x-8hh2-mfq8 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29946 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-29946 · Security Note
• https://osv.dev/vulnerability/GO-2024-2980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29946 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29946 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-29946 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-29946 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-29946 · Vendor Advisory
• https://twitter.com/CVEnew/status/1811500152030392767 · Twitter Post
• https://t.me/cvenotify/85957 · Telegram Post
• https://github.com/advisories/GHSA-2h2x-8hh2-mfq8 · Note
• https://t.me/cvedetector/698 · Telegram Post