KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
| Reporter | Title | Published | Views | Family All 31 |
|---|---|---|---|---|
 | CVE-2024-46528 | 14 Oct 202420:51 | – | circl |
 | KubeSphere 安全漏洞 | 14 Oct 202400:00 | – | cnnvd |
 | CVE-2024-46528 | 14 Oct 202400:00 | – | cve |
 | CVE-2024-46528 | 14 Oct 202400:00 | – | cvelist |
 | EUVD-2024-3090 | 3 Oct 202520:07 | – | euvd |
 | KubeSphere IDOR vulnerability | 14 Oct 202418:30 | – | github |
 | CVE-2024-46528 | 14 Oct 202418:15 | – | nvd |
 | govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media (moderate) | 19 Dec 202400:00 | – | opensuse |
 | GHSA-P26R-GFGC-C47H KubeSphere IDOR vulnerability | 14 Oct 202418:30 | – | osv |
| GO-2024-3248 KubeSphere IDOR vulnerability in github.com/kubesphere/kubesphere | 12 Dec 202415:16 | – | osv |
10
# Exploit Title: KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
# Date: 3 September
# Exploit Author: Okan Kurtulus
# Vendor Homepage: https://kubesphere.io
# Software Link: https://github.com/kubesphere/kubesphere
# Version: [>= 4.0.0 & < 4.1.3] , [>= 3.0.0 & < 3.4.1]
# Tested on: Ubuntu 22.04
# CVE : CVE-2024-46528
1-) Log in to the system with a user who is not registered to any workspace (e.g., a "platform-regular" user who has limited authorization).
Note: The authorization level of this user is as follows:
"Cannot access any resources before joining a workspace."
2-) After logging in with this user, it has been observed that cluster information, node information, users registered in the system, and other similar areas can be accessed without the user being registered to any workspace or cluster.
Examples of accessible endpoints:
http://xxx.xxx.xx.xx:30880/clusters/default/overview
http://xxx.xxx.xx.xx:30880/clusters/default/nodes
http://xxx.xxx.xx.xx:30880/access/accounts
http://xxx.xxx.xx.xx:30880/clusters/default/monitor-cluster/ranking
http://xxx.xxx.xx.xx:3 0880/clusters/default/monitor-cluster/resource
http://xxx.xxx.xx.xx:30880/clusters/default/projects
http://xxx.xxx.xx.xx:30880/clusters/default/nodes/minikube/pods
http://xxx.xxx.xx.xx:30880/clusters/default/kubeConfigData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Apr 2025 00:00Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.14.3
EPSS0.01584
SSVC