CVE-2018-10847 - OpenCVE

prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:S/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Prosody	Prosody

Configuration 1 [-]

OR	cpe:2.3:a:prosody:prosody::::::::
	cpe:2.3:a:prosody:prosody:0.10.0:::::::*
	cpe:2.3:a:prosody:prosody:0.10.1:::::::*

No data.

References

Link	Providers
https://blog.prosody.im/prosody-0-10-2-security-release/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847
https://issues.prosody.im/1147
https://prosody.im/security/advisory_20180531/
https://www.debian.org/security/2018/dsa-4216

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2018-07-30T16:00:00

Updated: 2024-08-05T07:46:47.419Z

Reserved: 2018-05-09T00:00:00

Link: CVE-2018-10847

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-07-30T17:29:00.147

Modified: 2019-10-09T23:33:03.883

Link: CVE-2018-10847

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "prosody", "vendor": "[UNKNOWN]", "versions": [{"status": "affected", "version": "0.10.2"}, {"status": "affected", "version": "0.9.14"}]}], "datePublic": "2018-05-31T00:00:00", "descriptions": [{"lang": "en", "value": "prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance."}], "metrics": [{"cvssV3_0": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-592", "description": "CWE-592", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-07-31T09:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://issues.prosody.im/1147"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://blog.prosody.im/prosody-0-10-2-security-release/"}, {"name": "DSA-4216", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "https://www.debian.org/security/2018/dsa-4216"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://prosody.im/security/advisory_20180531/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2018-10847", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "prosody", "version": {"version_data": [{"version_value": "0.10.2"}, {"version_value": "0.9.14"}]}}]}, "vendor_name": "[UNKNOWN]"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance."}]}, "impact": {"cvss": [[{"vectorString": "4.2/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}]]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-592"}]}]}, "references": {"reference_data": [{"name": "https://issues.prosody.im/1147", "refsource": "CONFIRM", "url": "https://issues.prosody.im/1147"}, {"name": "https://blog.prosody.im/prosody-0-10-2-security-release/", "refsource": "CONFIRM", "url": "https://blog.prosody.im/prosody-0-10-2-security-release/"}, {"name": "DSA-4216", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2018/dsa-4216"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847"}, {"name": "https://prosody.im/security/advisory_20180531/", "refsource": "CONFIRM", "url": "https://prosody.im/security/advisory_20180531/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T07:46:47.419Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://issues.prosody.im/1147"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://blog.prosody.im/prosody-0-10-2-security-release/"}, {"name": "DSA-4216", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "https://www.debian.org/security/2018/dsa-4216"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://prosody.im/security/advisory_20180531/"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2018-10847", "datePublished": "2018-07-30T16:00:00", "dateReserved": "2018-05-09T00:00:00", "dateUpdated": "2024-08-05T07:46:47.419Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*", "matchCriteriaId": "90B92A75-7D90-4FFD-B7B9-6C44497593F7", "versionEndExcluding": "0.9.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:prosody:prosody:0.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "6D1B1718-33AD-458E-BAEC-A00F0FB43D4E", "vulnerable": true}, {"criteria": "cpe:2.3:a:prosody:prosody:0.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "9455CF02-1156-4FD4-B286-36D20414466C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance."}, {"lang": "es", "value": "Prosody, en versiones anteriores a la 0.10.2 y 0.9.14, es vulnerable a una omisi\u00f3n de autenticaci\u00f3n. Prosody no verific\u00f3 que el host virtual asociado a una sesi\u00f3n de usuario se mantuviese igual durante los reinicios del flujo. Un usuario podr\u00eda autenticarse en el host XMPP A y migrar su sesi\u00f3n autenticada al host XMPP B de la misma instancia Prosody."}], "id": "CVE-2018-10847", "lastModified": "2019-10-09T23:33:03.883", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 2.5, "source": "secalert@redhat.com", "type": "Secondary"}]}, "published": "2018-07-30T17:29:00.147", "references": [{"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://blog.prosody.im/prosody-0-10-2-security-release/"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://issues.prosody.im/1147"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://prosody.im/security/advisory_20180531/"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2018/dsa-4216"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-592"}], "source": "secalert@redhat.com", "type": "Secondary"}]}