CVE-2023-20881

2023-05-1915:15:08

CWE-295

[email protected]

web.nvd.nist.gov

cloud foundry

capi

loggregator-agent

vulnerability

syslog drain

user credentials

client certificate

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override other users syslog drain credentials if they’re aware of the client certificate used for that syslog drain. This applies even if the drain has zero certs. This would allow the user to override the private key and add or modify a certificate authority used for the connection.

Affected configurations

Nvd

Node

cloudfoundrycapi-releaseRange1.140–1.152.0

cloudfoundrycf-deploymentRange24.7.0–29.0.0

cloudfoundryloggregator-agentRange7.0–7.2.1

VendorProductVersionCPE
cloudfoundrycapi-release*cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*
cloudfoundrycf-deployment*cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
cloudfoundryloggregator-agent*cpe:2.3:a:cloudfoundry:loggregator-agent:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cloudfoundry	capi-release	*	cpe:2.3:a:cloudfoundry:capi-release::::::::
cloudfoundry	cf-deployment	*	cpe:2.3:a:cloudfoundry:cf-deployment::::::::
cloudfoundry	loggregator-agent	*	cpe:2.3:a:cloudfoundry:loggregator-agent::::::::