PT-2024-14035 · Appwrite · Appwrite Cli

Published 2024-01-09 · Updated 2024-01-12 · CVE-2023-50974

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Appwrite CLI versions prior to 3.0.0

Description The issue arises when using the login command in Appwrite CLI, where the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. This allows any user of the local system to access those credentials.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the ~/.appwrite/prefs.json file to more restrictive settings to minimize access to the credentials.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2023-50974

GHSA-G777-CRP9-M27G

PYSEC-2024-2

Affected Products

Appwrite Cli

References · 11

• 🔥 https://gist.github.com/SkypLabs/72ee00ecfa7d1a3494e2d69a24279c1d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-50974 · Security Note
• https://osv.dev/vulnerability/CVE-2023-50974 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g777-crp9-m27g · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-2 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/appwrite/PYSEC-2024-2.yaml · Note
• https://github.com/appwrite/sdk-for-cli · Note
• https://twitter.com/CVEnew/status/1744643262592299447 · Twitter Post
• https://appwrite.io/docs/tooling/command-line/installation · Note
• https://t.me/cvenotify/67306 · Telegram Post
• https://t.me/cvenotify/66727 · Telegram Post