Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-32188— JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

EPSS 0.29% · P53
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-32188

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
Source: NVD (National Vulnerability Database)
Vulnerability Description
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1270
Source: NVD (National Vulnerability Database)
Vulnerability Title
NeuVector 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NeuVector是美国NeuVector公司的一套端到端的容器安全平台。该平台包括图像漏洞管理、准入控制和容器进程/文件系统保护等功能。 NeuVector 0.0.0-20230930010431-57d107118e92之前版本存在安全漏洞，该漏洞源于用户可以反向工程用于Manager和API访问的身份验证JWT令牌，伪造有效的令牌以执行恶意活动，导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
SUSEneuvector 0 ~ 0.0.0-20231003121714-be746957ee7c -

II. Public POCs for CVE-2023-32188

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-32188

请登录查看更多情报信息。

Same Patch Batch · SUSE · 2024-10-16 · 15 CVEs total

CVE-2023-321919.9 CRITICALrke's credentials are stored in the RKE1 Cluster state ConfigMap
CVE-2023-226508.8 HIGHRancher does not automatically clean up a user deleted or disabled from the configured Aut
CVE-2023-226498.4 HIGHRancher 'Audit Log' leaks sensitive information
CVE-2023-321938.3 HIGHNorman API Cross-site Scripting Vulnerability
CVE-2023-321928.3 HIGHRancher API Server Cross-site Scripting Vulnerability
CVE-2024-220308.0 HIGHRancher agents can be hijacked by taking over the Rancher Server URL
CVE-2024-220297.8 HIGHtomcat packaging allows for escalation to root from tomcat user
CVE-2023-321947.2 HIGHRancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespac
CVE-2023-321966.6 MEDIUMRancher's External RoleTemplates can lead to privilege escalation
CVE-2024-220326.5 MEDIUMRancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec
CVE-2024-220336.3 MEDIUMobs-service-download_url is vulnerable to argument injection
CVE-2023-321895.9 MEDIUMInsecure handling SSH key in SUSE Manager when bootstrapping new clients
CVE-2024-220345.5 MEDIUMCrafted projects can overwrite special files in the .osc config directory
CVE-2023-32190mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable

IV. Related Vulnerabilities

Same product: neuvector
Same vendor: SUSE
Same weakness: CWE-1270

V. Comments for CVE-2023-32188

No comments yet

Leave a comment