GHSA-9cwv-cppx-mqjm — high GitHub Advisory (CVE-2022-23652) in go/github.com/clastix/capsule-proxy

描述

Impact

Using a malicious Connection header, an attacker with a proper authentication mechanism could start a privilege escalation towards the Kubernetes API Server, being able to exploit the cluster-admin Role bound to capsule-proxy.

Patches

Patch has been merged in the v0.2.1 release.

Workarounds

Upgrading is mandatory.

基本信息

类型: reviewed
严重度: high
GitHub 上的公告: 打开公告 ↗
仓库公告: 打开仓库公告 ↗
源代码: 浏览源码 ↗
公开（公告）: 2022-02-23 21:17:25 UTC
更新时间: 2023-02-03 05:06:26 UTC
GitHub 审核: 2022-02-23 21:17:25 UTC
NVD 公开: 2022-02-22

Score	Percentile
0.39%	59.50%

CVSS Scores

Base score	Version	Severity	Vector
8.8	3.1	—	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H` 点击展开攻击向量 (AV:N) 经互联网或企业内可路由网段即可从远端触达，攻击者不必出现在设备旁。攻击复杂度 (AC:L) 前置条件清晰，成功路径稳定，不依赖罕见竞态或苛刻环境。权限要求 (PR:L) 一般用户权限即可，不必是管理员或 root。用户交互 (UI:N) 无需受害者点击链接、放行宏或安装软件，攻击链可自动走完。作用域 (S:U) 破坏局限在脆弱组件原本的安全权限与信任域之内。机密性影响 (C:H) 批量读取、导出或长期潜伏窃取机密数据，在实战上成立。完整性影响 (I:H) 可篡改审计日志、植入后门或大面积伪造业务数据，动摇信任根基。可用性影响 (A:H) 可造成长时间中断、关键事务无法完成，或伴随数据损毁导致难以自愈。

Identifiers

Type	Value
GHSA	GHSA-9cwv-cppx-mqjm ↗
CVE	CVE-2022-23652 ↗

CWEs

CWE id	Name
CWE-287	Improper Authentication

Credits

enj (analyst)

Affected packages (1)

Vulnerable version ranges and first patched releases as published by GitHub.

Ecosystem	Package	Vulnerable range	First patched	Vulnerable functions
go	github.com/clastix/capsule-proxy	< 0.2.1	0.2.1	—

Improper Authentication in Capsule Proxy

描述