Lucene search

ZoweVULNRICHMENT:CVE-2024-6834

HistoryJul 17, 2024 - 2:44 p.m.

CVE-2024-6834 Imperative Local Command Injection allows Activity Masking

2024-07-1714:44:06

Zowe

github.com

vulnerability

apiml spring cloud gateway

user privileges

proxied request

zowe's client certificate

access control

internal client certificate

communication security.

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:T/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.3%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe’s client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. It could lead to managing components in there and allow an attacker to handle the whole communication including user credentials.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linuxfoundation:zowe_api_mediation_layer:*:*:*:*:*:*:*:*"
    ],
    "vendor": "linuxfoundation",
    "product": "zowe_api_mediation_layer",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.0",
        "lessThan": "2.14.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/zowe/api-layer

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:T/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.3%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-6834