Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-39222

Опубликовано: 06 окт. 2022
Источник: redhat
CVSS3: 6.5

Описание

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if they are running a version prior to 2.35.0. An attacker can exploit this vulnerability by making a victim navigate to a malicious website and guiding them through the OIDC flow, stealing the OAuth authorization code in the process. The authorization code then can be exchanged by the attacker for a token, gaining access to applications accepting that token. Version 2.35.0 has introduced a fix for this issue. Users are advised to upgrade. There are no known workarounds for this issue.

A flaw was found in Dex, an identity service that uses OpenID Connect to drive authentication for other apps. This issue may allow an attacker to make a victim navigate to a malicious website and guide them through the OIDC flow, stealing the OAuth authorization code in the process. The authorization code then can be exchanged by the attacker for a token, gaining access to applications accepting that token. Version 2.35.0 has introduced a fix for this issue; Users are advised to upgrade.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Advanced Cluster Management for Kubernetes 2rhacm2/observatorium-rhel8Not affected
Red Hat Advanced Cluster Security 3advanced-cluster-security/rhacs-central-db-rhel8Not affected
Red Hat Advanced Cluster Security 3advanced-cluster-security/rhacs-main-rhel8Not affected
Red Hat Advanced Cluster Security 3advanced-cluster-security/rhacs-rhel8-operatorNot affected
Red Hat Advanced Cluster Security 3advanced-cluster-security/rhacs-roxctl-rhel8Not affected
Red Hat OpenShift GitOpsopenshift-gitops-1/dex-rhel8Not affected
Red Hat Advanced Cluster Security 4.3advanced-cluster-security/rhacs-central-db-rhel8FixedRHSA-2023:772511.12.2023
Red Hat Advanced Cluster Security 4.3advanced-cluster-security/rhacs-main-rhel8FixedRHSA-2023:772511.12.2023
Red Hat Advanced Cluster Security 4.3advanced-cluster-security/rhacs-rhel8-operatorFixedRHSA-2023:772511.12.2023
Red Hat Advanced Cluster Security 4.3advanced-cluster-security/rhacs-roxctl-rhel8FixedRHSA-2023:772511.12.2023

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-862
https://bugzilla.redhat.com/show_bug.cgi?id=2253625dexidp: gaining access to applications accepting that token

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.3
nvd
больше 3 лет назад

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if they are running a version prior to 2.35.0. An attacker can exploit this vulnerability by making a victim navigate to a malicious website and guiding them through the OIDC flow, stealing the OAuth authorization code in the process. The authorization code then can be exchanged by the attacker for a token, gaining access to applications accepting that token. Version 2.35.0 has introduced a fix for this issue. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 9.3
debian
больше 3 лет назад

Dex is an identity service that uses OpenID Connect to drive authentic ...

CVSS3: 9.3
github
больше 3 лет назад

Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code

6.5 Medium

CVSS3