Advisory Details

July 29th, 2024

KernelCI SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

ZDI-24-998
ZDI-CAN-22317

CVE ID
CVSS SCORE 8.2, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
AFFECTED VENDORS KernelCI
AFFECTED PRODUCTS KernelCI
VULNERABILITY DETAILS

This vulnerability allows remote attackers to bypass authentication on KernelCI. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to make unauthorized changes to KernelCI build data.

ADDITIONAL DETAILS KernelCI has issued an update to correct this vulnerability. More details can be found at:
https://github.com/kernelci/kernelci-project/commit/94be815f992f73e6ddc5dfdd4c6d458dc86cfce0
DISCLOSURE TIMELINE
  • 2023-10-12 - Vulnerability reported to vendor
  • 2024-07-29 - Coordinated public release of advisory
  • 2024-08-15 - Advisory Updated
CREDIT Nitesh Surana (@_niteshsurana) of Trend Micro Research
BACK TO ADVISORIES