CVSS 7.2 · High EPSS 0,62%
Kerentanan Improper Authorization pada coder. Skor CVSS 3.1 7.2 (High) menurut github.com.
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. Exploitation requires the privileged `user-admin` role so practical risk is limited to deployments that grant `user-admin` to less trusted operators. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 prevents non-owner users from resetting the password of an account that holds the `owner` role. As a workaround, restrict the `user-admin` role to trusted administrators.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| coder | coder | Semua versi sebelum 2.29.17 |
| coder | coder | Versi 2.30.0 hingga sebelum 2.32.7 |
| coder | coder | Versi 2.33.0 hingga sebelum 2.33.8 |
| coder | coder | Versi 2.34.0 hingga sebelum 2.34.2 |