WebAuthn4J Spring Security Improper signature counter value handling

中 5.3CVE-2023-45669 · GHSA-v9hx-v6vf-g36j · 16/10/2023 公開 · 17/06/2026 更新

要点

CVE-2023-45669 は com.webauthn4j:webauthn4j-spring-security-core, spring security (webauthn4j) に影響する深刻度「中」 (CVSS 5.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.64%（全脆弱性の 50.9% より高い）。
対処：0.9.1.RELEASE, 0.9.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
com.webauthn4j:webauthn4j-spring-security-core Maven	`< 0.9.1.RELEASE`	`0.9.1.RELEASE`
spring security webauthn4j	`< 0.9.1`	`0.9.1`

概要

Improper signature counter value handling

Impact

A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter value during authentication, webauthn4j-spring-security-core does not properly persist the value, which means cloned authenticator detection does not work. An attacker who cloned valid authenticator in some way can use the cloned authenticator without being detected.

Patches

Please upgrade to com.webauthn4j:webauthn4j-spring-security-core:0.9.1.RELEASE

References

For more details about WebAuthn signature counters, see WebAuthn specification 6.1.1. Signature Counter Considerations.

Reporter

This issue was discovered by Michael Budnick (@mbudnick)

NVD の説明

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter value during authentication, webauthn4j-spring-security-core does not properly persist the value, which means cloned authenticator detection does not work. An attacker who cloned valid authenticator in some way can use the cloned authenticator without being detected. This issue has been addressed in version `0.9.1.RELEASE`. Users are advised to upgrade. There are no known workarounds for this vulnerability.