CVE-2022-24901: Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource the URL points to before downloading it.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-24901?
CVE-2022-24901 is a vulnerability that allows attackers to bypass authentication in the Apple Game Center authentication adapter, potentially leading to DoS attacks.
How can attackers exploit CVE-2022-24901?
Attackers can exploit CVE-2022-24901 by exploiting the improper validation of the Apple certificate URL in the Apple Game Center authentication adapter.
What is the severity of CVE-2022-24901?
CVE-2022-24901 has a severity level of 7.5 (high).
How can I fix CVE-2022-24901?
To fix CVE-2022-24901, update Parseplatform Parse-server to version 5.2.1 or apply the necessary patches provided by the vendor.
Where can I find more information about CVE-2022-24901?
You can find more information about CVE-2022-24901 at the following reference: https://github.com/parse-community/parse-server/security/advisories/GHSA-qf8x-vqjv-92gr