CVE-2023-32079: Netmaker Privilige Escalation Vulnerability
Impact A Mass assignment vulnerability was found allowing a non-admin user to escalate privileges to admin user.
Patches Issue is patched in 0.17.1, and fixed in 0.18.6+.
If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d". This will switch them to the patched users
If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later.
Workarounds If using 0.17.1, can just pull the latest docker image of backend and restart server.
References Credit to Project Discovery, and in particular https://github.com/rootxharsh , https://github.com/iamnoooob, and https://github.com/projectdiscovery
Other sources
Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run docker pull gravitl/netmaker:v0.17.1 and docker-compose up -d. This will switch them to the patched users If users are using v0.18.0-0.18.5, they should upgrade to v0.18.6 or later. As a workaround, someone using version 0.17.1 can pull the latest docker image of the backend and restart the server.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-32079.
What is the impact of the vulnerability?
The vulnerability allows a non-admin user to escalate privileges to an admin user.
How can I patch this vulnerability?
To patch this vulnerability, users should update to version 0.18.6 or higher and run "docker pull gravitl/netmaker:v0.18.6" and "docker-compose up -d". Users on version 0.17.1 should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d".
What is the severity of CVE-2023-32079?
The severity of CVE-2023-32079 is high with a CVSS score of 8.8.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-915.