요약
- CVE-2023-22644은(는) github.com/neuvector/neuvector, manager server (suse)에 영향을 주는 보통 (CVSS 5.5) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.46%, 전체 취약점의 39.6%보다 높음.
- 조치: 0.0.0-20231003121714-be746957ee7c, 4.2.50-150300.3.66.5, 4.3.58-150400.3.46.4 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| github.com/neuvector/neuvector Go | < 0.0.0-20231003121714-be746957ee7c
| 0.0.0-20231003121714-be746957ee7c
|
| manager server | ≥ 4.2, < 4.2.50-150300.3.66.5≥ 4.3, < 4.3.58-150400.3.46.4
| 4.2.50-150300.3.66.54.3.58-150400.3.46.4
|
Description
JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector
NVD description
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
github.com/neuvector/neuvector의 다른 취약점
모두 보기 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free