CVE-2022-39366

Katalog CVE

CVSS 9.8 · Critical EPSS 0,93%

Kerentanan Improper Authentication pada datahub. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata Service authentication is enabled. This vulnerability occurs because the `StatelessTokenService` of the Metadata service uses the `parse` method of `io.jsonwebtoken.JwtParser`, which does not perform a verification of the cryptographic token signature. This means that JWTs are accepted regardless of the used algorithm. This issue may lead to an authentication bypass. Version 0.8.45 contains a patch for the issue. There are no known workarounds.

Rincian

Terbit di NVD

28 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication
CWE-303: Incorrect Implementation of Authentication Algorithm
CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://codeql.github.com/codeql-query-help/java/java-missing-jwt-signature-check/ advisory pihak ketiga
• https://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/metadata-service/auth... exploit · advisory pihak ketiga
• https://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/metadata-service/auth... exploit · advisory pihak ketiga
• https://github.com/datahub-project/datahub/releases/tag/v0.8.45 advisory pihak ketiga
• https://github.com/datahub-project/datahub/security/advisories/GHSA-r8gm-v65f-c973 advisory pihak ketiga