CVE-2023-37916: Leak password hash of any user
Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user (including admin). This leads to password crack attack
PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview
Impact - Leaking confidential information. - Can lead to password cracking attacks
Other sources
KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/github.com/KubeOperator/kubepito a version that resolves this vulnerability.Fixed in 1.6.5 - Upgrade
Upgrade
KubePito a version that resolves this vulnerability.Fixed in 1.6.5
Event History
Frequently Asked Questions
What is CVE-2023-37916?
CVE-2023-37916 is a vulnerability in KubePi that allows an attacker to leak password hashes of any user, including the admin.
How can an attacker exploit CVE-2023-37916?
An attacker can exploit CVE-2023-37916 by accessing the endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 and retrieve the password hashes.
What is the severity of CVE-2023-37916?
CVE-2023-37916 has a severity rating of 7.5, which is considered high.
How can I fix CVE-2023-37916?
To fix CVE-2023-37916, update KubePi to version 1.6.5 or higher.
Is there any additional information about CVE-2023-37916?
Yes, you can refer to the following resources for more information: [GitHub Security Advisory](https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-87f6-8gr7-pc6h), [Google Drive Preview](https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview), [KubePi Release Tag (v1.6.5)](https://github.com/1Panel-dev/KubePi/releases/tag/v1.6.5)