Lucene search

GoogleOSV:GHSA-X637-X8P3-5P22

HistoryMar 20, 2024 - 3:32 p.m.

Improper Authentication in Spring Authorization Server

2024-03-2015:32:28

Google

osv.dev

spring authorization server

pkce downgrade attack

confidential clients

public client

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - 1.1.5, 1.2.0 - 1.2.2 and older unsupported versions are susceptible to a PKCE Downgrade Attack for Confidential Clients.

Specifically, an application is vulnerable when a Confidential Client uses PKCE for the Authorization Code Grant.

An application is not vulnerable when a Public Client uses PKCE for the Authorization Code Grant.

CPENameOperatorVersion
org.springframework.security:spring-security-oauth2-authorization-servereq0.2.2
org.springframework.security:spring-security-oauth2-authorization-servereq0.2.0
org.springframework.security:spring-security-oauth2-authorization-servereq1.2.2
org.springframework.security:spring-security-oauth2-authorization-servereq0.4.2
org.springframework.security:spring-security-oauth2-authorization-servereq1.2.1
org.springframework.security:spring-security-oauth2-authorization-servereq0.4.4
org.springframework.security:spring-security-oauth2-authorization-servereq1.1.5
org.springframework.security:spring-security-oauth2-authorization-servereq0.4.5
org.springframework.security:spring-security-oauth2-authorization-servereq1.0.4
org.springframework.security:spring-security-oauth2-authorization-servereq1.1.1

Name	Operator	Version
org.springframework.security:spring-security-oauth2-authorization-server	eq	0.2.2
org.springframework.security:spring-security-oauth2-authorization-server	eq	0.2.0
org.springframework.security:spring-security-oauth2-authorization-server	eq	1.2.2
org.springframework.security:spring-security-oauth2-authorization-server	eq	0.4.2
org.springframework.security:spring-security-oauth2-authorization-server	eq	1.2.1
org.springframework.security:spring-security-oauth2-authorization-server	eq	0.4.4
org.springframework.security:spring-security-oauth2-authorization-server	eq	1.1.5
org.springframework.security:spring-security-oauth2-authorization-server	eq	0.4.5
org.springframework.security:spring-security-oauth2-authorization-server	eq	1.0.4
org.springframework.security:spring-security-oauth2-authorization-server	eq	1.1.1

Rows per page:

1-10 of 261

References

github.com/spring-projects/spring-authorization-server

github.com/spring-projects/spring-authorization-server/commit/a7035d22bd2de6c24e7125623d38fb83d8f659a9

nvd.nist.gov/vuln/detail/CVE-2024-22258

spring.io/security/cve-2024-22258

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for OSV:GHSA-X637-X8P3-5P22