CVE-2019-12494

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters. This occurs because traffic from shoot to seed via the VPN endpoint is not blocked.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://github.com/gardener/gardener/pull/874	Issue Tracking Third Party Advisory
https://github.com/gardener/vpn/issues/40	Third Party Advisory
https://groups.google.com/forum/#%21topic/gardener/pH6dNIEhv-A

Configurations

Configuration 1 (hide)

cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:03

Type	Values Removed	Values Added
References	{'url': 'https://groups.google.com/forum/#!topic/gardener/pH6dNIEhv-A', 'name': 'https://groups.google.com/forum/#!topic/gardener/pH6dNIEhv-A', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'CONFIRM'}	() https://groups.google.com/forum/#%21topic/gardener/pH6dNIEhv-A -

Information

Published : 2019-06-05 19:29

Updated : 2024-02-28 17:08

NVD link : CVE-2019-12494

Mitre link : CVE-2019-12494

CVE.ORG link : CVE-2019-12494

JSON object : View

Products Affected

gardener

gardener

CWE

NVD-CWE-noinfo

{"id": "CVE-2019-12494", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "published": "2019-06-05T19:29:00.233", "references": [{"url": "https://github.com/gardener/gardener/pull/874", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/gardener/vpn/issues/40", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://groups.google.com/forum/#%21topic/gardener/pH6dNIEhv-A", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters. This occurs because traffic from shoot to seed via the VPN endpoint is not blocked."}, {"lang": "es", "value": "En Gardener anterior a la versi\u00f3n 0.20.0, el control de acceso incorrecto en los clusters de usuarios tipo seed permite la divulgaci\u00f3n de informaci\u00f3n mediante el env\u00edo de peticiones HTTP GET desde los clusters de disparo propios a los clusters de disparo ajenos. Esto ocurre porque el tr\u00e1fico de disparo a un usuario seed por medio del endpoint VPN que no est\u00e1 bloqueado."}], "lastModified": "2023-11-07T03:03:36.870", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA3A6E27-A7DE-4723-9BB8-72A4C975F1A0", "versionEndExcluding": "0.20.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}