CVE-2023-48707

{"id": "CVE-2023-48707", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 0.7}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2023-11-24T18:15:07.327", "references": [{"url": "https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow had access to the data in the database, they could use the key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. There are no known workarounds for this vulnerability."}, {"lang": "es", "value": "CodeIgniter Shield es un proveedor de autenticaci\u00f3n y autorizaci\u00f3n para CodeIgniter 4. El valor `secretKey` es una clave importante para la autenticaci\u00f3n HMAC SHA256 y en las versiones afectadas se almacenaba en la base de datos en forma de texto plano. Si una persona malintencionada de alguna manera tuviera acceso a los datos de la base de datos, podr\u00eda usar la clave y la clave secreta para la autenticaci\u00f3n HMAC SHA256 para enviar solicitudes haci\u00e9ndose pasar por ese usuario correspondiente. Este problema se solucion\u00f3 en la versi\u00f3n 1.0.0-beta.8. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."}], "lastModified": "2024-11-21T08:32:18.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1E3F1E0-C2D7-4EC5-AD04-AEB414A3D71C"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DDA8B62-EE63-40C0-9F2C-23F56B225F49"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F37B4E1-D641-4D55-9D3F-FB3B18934FE9"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3361F9CD-A084-4437-BF22-08A558C326B5"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEF20FB8-F114-4B54-8CEF-739433359E21"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "340EBC7C-51FC-4792-A0A4-A323219D1551"}, {"criteria": "cpe:2.3:a:codeigniter:shield:1.0.0:beta7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "061CA3F7-EDAD-4D04-AFBC-9ABD22470AF1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}