PT-2024-22619 · Stork · Stork

Published 2024-03-27 · Updated 2024-07-12 · CVE-2024-28872

Positive Technologies (AI Summary)

CVSS v3.1

8.9

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions Stork versions 0.15.0 through 1.15.0

Description The TLS certificate validation code is flawed, allowing an attacker to obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once connected, the attacker can send malicious commands to a monitored service, possibly resulting in confidential data loss and/or denial of service. This issue is not related to BIND 9 or Kea directly and only affects customers using the Stork management tool.

Recommendations For Stork versions 0.15.0 through 1.15.0, update to a version that includes the fix for the flawed TLS certificate validation code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2024-28872

Affected Products

Stork

References · 12

• https://osv.dev/vulnerability/CVE-2024-28872 · Vendor Advisory
• https://kb.isc.org/docs/cve-2024-28872 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28872 · Security Note
• https://t.me/cvedetector/660 · Telegram Post
• https://t.me/cvenotify/86099 · Telegram Post
• https://t.me/pentestingnews/45226 · Telegram Post
• https://twitter.com/CveFindCom/status/1811415435117568046 · Twitter Post
• https://t.me/cvenotify/85861 · Telegram Post
• https://twitter.com/Komodosec/status/1773199365043359879 · Twitter Post
• https://twitter.com/CVEnew/status/1811428041811214727 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1773195944151994712 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1811437751159472566 · Twitter Post