cve.nowby Sazabi
← All vulnerabilities
CVE-2020-37281

Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed with the shipped default jwt.secret. Attackers knowing an existing user ID can sign an HS256 token with that subject and present it as a bearer token to the Management API, impersonating administrators to gain full platform control.

Affected versions

  • Gravitee Gravitee API Management

    through 4.12.22

References 6

GitHub · gravitee-io/issues

GitHub · gravitee-io/gravitee-api-management

GitHub · gravitee-io/gravitee-docs

vulncheck.com