microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
41Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.7epss 0.8%
probabilidad de explotación
0.8%top 43% de las CVE
explotación observada
noninguna fuente lo reporta
5 exploit(s) público(s)
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including user management, role assignment, and Elasticsearch index operations by bypassing the disabled authorization enforcement.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
zlt2000 · microservices-platformPoCs públicas encontradas — 5
cve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pyno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pyhttps://github.com/zlt2000/microservices-platformhttps://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/properties/UrlPermissionProperties.java#L25https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/service/impl/DefaultPermissionServiceImpl.java#L59https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-gateway/sc-gateway/src/main/resources/application.yml#L122https://www.vulncheck.com/advisories/microservices-platform-through-6.0.0-missing-authorization-via-disabled-url-permission-checking