Lucene search

[email protected]CVE-2021-23365

HistoryApr 26, 2021 - 10:15 a.m.

CVE-2021-23365

2021-04-2610:15:12

CWE-287

[email protected]

web.nvd.nist.gov

cve-2021-23365

authentication bypass

github

tyk technologies

identity broker

saml

xml parser

vulnerability

nvd

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data).

Affected configurations

NVD

Node

tyktyk-identity-brokerRange<1.1.1

CPENameOperatorVersion
tyk:tyk-identity-brokertyk tyk-identity-brokerlt1.1.1

CPE	Name	Operator	Version
tyk:tyk-identity-broker	tyk tyk-identity-broker	lt	1.1.1

CNA Affected

[
  {
    "product": "github.com/TykTechnologies/tyk-identity-broker",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "1.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/TykTechnologies/tyk-identity-broker/commit/243092965b0f93a95a14cb882b5b9a3df61dd5c0

github.com/TykTechnologies/tyk-identity-broker/commit/46f70420e0911e4e8b638575e29d394c227c75d0

github.com/TykTechnologies/tyk-identity-broker/pull/147

github.com/TykTechnologies/tyk-identity-broker/releases/tag/v1.1.1

snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKIDENTITYBROKER-1089720

Social References

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

Related for CVE-2021-23365

prion1 cvelist1 nvd1 github1 osv2