CVE-2024-38371 - Vulnerability Details - OpenCVE

authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Goauthentik	Authentik

No data.

No data.

References

Link	Providers
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3
https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0
https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-06-28T17:58:48.169Z

Updated: 2024-08-02T04:04:25.257Z

Reserved: 2024-06-14T14:16:16.466Z

Link: CVE-2024-38371

Vulnrichment

Updated: 2024-06-28T20:10:51.361Z

NVD

Status : Awaiting Analysis

Published: 2024-06-28T18:15:04.647

Modified: 2024-11-21T09:25:30.827

Link: CVE-2024-38371

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-38371", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-06-14T14:16:16.466Z", "datePublished": "2024-06-28T17:58:48.169Z", "dateUpdated": "2024-08-02T04:04:25.257Z"}, "containers": {"cna": {"title": "Insufficient access control for OAuth2 Device Code flow in authentik", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-285", "lang": "en", "description": "CWE-285: Improper Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}], "affected": [{"vendor": "goauthentik", "product": "authentik", "versions": [{"version": "< 2024.6.0", "status": "affected"}, {"version": "< 2024.4.3", "status": "affected"}, {"version": "< 2024.2.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-28T17:58:48.169Z"}, "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}], "source": {"advisory": "GHSA-jq3m-37m7-gp45", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "goauthentik", "product": "authentik", "cpes": ["cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2024.6.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "2024.4.3", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "2024.2.4", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-28T20:07:42.936032Z", "id": "CVE-2024-38371", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T20:10:55.919Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:04:25.257Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-38371", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-28T20:07:42.936032Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*"], "vendor": "goauthentik", "product": "authentik", "versions": [{"status": "affected", "version": "0", "lessThan": "2024.6.0", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2024.4.3", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2024.2.4", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T20:10:51.361Z"}}], "cna": {"title": "Insufficient access control for OAuth2 Device Code flow in authentik", "source": {"advisory": "GHSA-jq3m-37m7-gp45", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "goauthentik", "product": "authentik", "versions": [{"status": "affected", "version": "< 2024.6.0"}, {"status": "affected", "version": "< 2024.4.3"}, {"status": "affected", "version": "< 2024.2.4"}]}], "references": [{"url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285: Improper Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-28T17:58:48.169Z"}}}, "cveMetadata": {"cveId": "CVE-2024-38371", "state": "PUBLISHED", "dateUpdated": "2024-06-28T20:10:55.919Z", "dateReserved": "2024-06-14T14:16:16.466Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-06-28T17:58:48.169Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}, {"lang": "es", "value": "authentik es un proveedor de identidades de c\u00f3digo abierto. Las restricciones de acceso asignadas a una aplicaci\u00f3n no se verificaron cuando se utiliz\u00f3 el flujo de c\u00f3digo del dispositivo OAuth2. Potencialmente, esto podr\u00eda permitir a los usuarios sin la autorizaci\u00f3n correcta obtener tokens OAuth para una aplicaci\u00f3n y acceder a ella. Este problema se solucion\u00f3 en las versiones 2024.6.0, 2024.2.4 y 2024.4.3."}], "id": "CVE-2024-38371", "lastModified": "2024-11-21T09:25:30.827", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2024-06-28T18:15:04.647", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"source": "security-advisories@github.com", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"source": "security-advisories@github.com", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-285"}], "source": "security-advisories@github.com", "type": "Secondary"}]}