CVE-2023-25570 - OpenCVE

Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers may access eureka directly to mock apollo-configservice and apollo-adminservice. Login authentication for eureka was added in version 2.1.0. As a workaround, avoid exposing apollo-configservice to the internet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Apolloconfig	Apollo

Configuration 1 [-]

cpe:2.3:a:apolloconfig:apollo:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd
https://github.com/apolloconfig/apollo/pull/4663
https://github.com/apolloconfig/apollo/releases/tag/v2.1.0
https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-02-20T15:22:03.992Z

Updated: 2024-08-02T11:25:19.249Z

Reserved: 2023-02-07T17:10:00.739Z

Link: CVE-2023-25570

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-02-20T16:15:10.593

Modified: 2023-03-01T16:11:34.053

Link: CVE-2023-25570

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-25570", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-02-07T17:10:00.739Z", "datePublished": "2023-02-20T15:22:03.992Z", "dateUpdated": "2024-08-02T11:25:19.249Z"}, "containers": {"cna": {"title": "Apollo has potential access control security issue in eureka", "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c"}, {"name": "https://github.com/apolloconfig/apollo/pull/4663", "tags": ["x_refsource_MISC"], "url": "https://github.com/apolloconfig/apollo/pull/4663"}, {"name": "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd", "tags": ["x_refsource_MISC"], "url": "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd"}, {"name": "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0"}], "affected": [{"vendor": "apolloconfig", "product": "apollo", "versions": [{"version": "< 2.1.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-02-20T15:22:03.992Z"}, "descriptions": [{"lang": "en", "value": "Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers may access eureka directly to mock apollo-configservice and apollo-adminservice. Login authentication for eureka was added in version 2.1.0. As a workaround, avoid exposing apollo-configservice to the internet."}], "source": {"advisory": "GHSA-368x-wmmg-hq5c", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:25:19.249Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c"}, {"name": "https://github.com/apolloconfig/apollo/pull/4663", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/apolloconfig/apollo/pull/4663"}, {"name": "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd"}, {"name": "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apolloconfig:apollo:*:*:*:*:*:*:*:*", "matchCriteriaId": "799ED7FE-4FAA-475E-A4E6-2F3179879F3E", "versionEndExcluding": "2.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers may access eureka directly to mock apollo-configservice and apollo-adminservice. Login authentication for eureka was added in version 2.1.0. As a workaround, avoid exposing apollo-configservice to the internet."}], "id": "CVE-2023-25570", "lastModified": "2023-03-01T16:11:34.053", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2023-02-20T16:15:10.593", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/apolloconfig/apollo/pull/4663"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-306"}], "source": "security-advisories@github.com", "type": "Secondary"}]}