Advisory Details

July 29th, 2024

KernelCI SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

CVE ID
CVSS SCORE	8.2, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
AFFECTED VENDORS	KernelCI
AFFECTED PRODUCTS	KernelCI
VULNERABILITY DETAILS	This vulnerability allows remote attackers to bypass authentication on KernelCI. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to make unauthorized changes to KernelCI build data.
ADDITIONAL DETAILS	KernelCI has issued an update to correct this vulnerability. More details can be found at: https://github.com/kernelci/kernelci-project/commit/94be815f992f73e6ddc5dfdd4c6d458dc86cfce0
DISCLOSURE TIMELINE	2023-10-12 - Vulnerability reported to vendor 2024-07-29 - Coordinated public release of advisory 2024-08-15 - Advisory Updated
CREDIT	Nitesh Surana (@_niteshsurana) of Trend Micro Research

BACK TO ADVISORIES