CVE-2023-48312 - Authentication bypass using an empty token in capsule-proxy

Back Back to CVE browser

CRITICAL

Authentication bypass using an empty token in capsule-proxy

Published Nov 24, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.57%

Description

capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes API Server setting disable (set to `false`) are affected since it would be possible to bypass the token review mechanism, interacting with the upper Kubernetes API Server. This privilege escalation cannot be exploited if you're relying only on client certificates (SSL/TLS). This vulnerability has been addressed in version 0.4.6. Users are advised to upgrade.

Affected products

Vendor Projectcapsule Product Capsule-Proxy Default
unknown
Affected
- < 0.4.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Projectcapsule	Capsule-Proxy	unknown	Affected < 0.4.6

github.com/projectcapsule/capsule-proxy

Go

Introduced 0 Fixed 0.4.6
github.com/clastix/capsule-proxy

Go

Introduced 0 Fixed 0.4.6

Ecosystem	Package	Introduced	Fixed
Go	github.com/projectcapsule/capsule-proxy	0	0.4.6
Go	github.com/clastix/capsule-proxy	0	0.4.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2961
Advisory
https://github.com/advisories/GHSA-fpvw-6m5v-hqfp
Advisory
https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823
x_refsource_MISCPatch
https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp
x_refsource_CONFIRMExploitVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-48312

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2961		Advisory
https://github.com/advisories/GHSA-fpvw-6m5v-hqfp		Advisory
https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823		x_refsource_MISCPatch
https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp		x_refsource_CONFIRMExploitVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-48312