CVE-2023-39349 - Vulnerability Details - OpenCVE

ReportizFlow

Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Getsentry	Sentry
Sentry	Sentry

Configuration 1 [-]

cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/getsentry/self-hosted/releases/tag/23.7.2
https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083
https://github.com/getsentry/sentry/pull/53850
https://github.com/getsentry/sentry/releases/tag/23.7.2
https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c

History

Mon, 07 Oct 2024 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Getsentry Getsentry sentry
CPEs		cpe:2.3:a:getsentry:sentry::::::::
Vendors & Products		Getsentry Getsentry sentry
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-08-07T18:27:12.396Z

Updated: 2024-10-04T19:12:12.595Z

Reserved: 2023-07-28T13:26:46.477Z

Link: CVE-2023-39349

Vulnrichment

Updated: 2024-08-02T18:02:06.994Z

NVD

Status : Modified

Published: 2023-08-07T19:15:11.697

Modified: 2024-11-21T08:15:12.627

Link: CVE-2023-39349

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-39349", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-07-28T13:26:46.477Z", "datePublished": "2023-08-07T18:27:12.396Z", "dateUpdated": "2024-10-04T19:12:12.595Z"}, "containers": {"cna": {"title": "Sentry vulnerable to privilege escalation via ApiTokensEndpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-287", "lang": "en", "description": "CWE-287: Improper Authentication", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}, {"name": "https://github.com/getsentry/sentry/pull/53850", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"name": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"name": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"name": "https://github.com/getsentry/sentry/releases/tag/23.7.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}], "affected": [{"vendor": "getsentry", "product": "sentry", "versions": [{"version": ">= 22.1.0, < 23.7.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-08-07T18:27:12.396Z"}, "descriptions": [{"lang": "en", "value": "Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds."}], "source": {"advisory": "GHSA-9jcq-jf57-c62c", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:02:06.994Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}, {"name": "https://github.com/getsentry/sentry/pull/53850", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"name": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"name": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"name": "https://github.com/getsentry/sentry/releases/tag/23.7.2", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}]}, {"affected": [{"vendor": "getsentry", "product": "sentry", "cpes": ["cpe:2.3:a:getsentry:sentry:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "22.1.0", "status": "affected", "lessThan": "23.7.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-04T18:24:29.865480Z", "id": "CVE-2023-39349", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-04T19:12:12.595Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-39349", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-07-28T13:26:46.477Z", "datePublished": "2023-08-07T18:27:12.396Z", "dateUpdated": "2024-10-04T19:12:12.595Z"}, "containers": {"cna": {"title": "Sentry vulnerable to privilege escalation via ApiTokensEndpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-287", "lang": "en", "description": "CWE-287: Improper Authentication", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}, {"name": "https://github.com/getsentry/sentry/pull/53850", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"name": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"name": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"name": "https://github.com/getsentry/sentry/releases/tag/23.7.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}], "affected": [{"vendor": "getsentry", "product": "sentry", "versions": [{"version": ">= 22.1.0, < 23.7.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-08-07T18:27:12.396Z"}, "descriptions": [{"lang": "en", "value": "Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds."}], "source": {"advisory": "GHSA-9jcq-jf57-c62c", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:02:06.994Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}, {"name": "https://github.com/getsentry/sentry/pull/53850", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"name": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"name": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"name": "https://github.com/getsentry/sentry/releases/tag/23.7.2", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-39349", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-04T18:24:29.865480Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:getsentry:sentry:*:*:*:*:*:*:*:*"], "vendor": "getsentry", "product": "sentry", "versions": [{"status": "affected", "version": "22.1.0", "lessThan": "23.7.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-04T19:03:37.993Z"}}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9764018-F8B3-4978-83C0-D5362EED433D", "versionEndExcluding": "23.7.2", "versionStartIncluding": "22.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds."}], "id": "CVE-2023-39349", "lastModified": "2024-11-21T08:15:12.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-08-07T19:15:11.697", "references": [{"source": "[email protected]", "tags": ["Release Notes"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}, {"source": "[email protected]", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/getsentry/self-hosted/releases/tag/23.7.2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/getsentry/sentry/pull/53850"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/getsentry/sentry/releases/tag/23.7.2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-287"}], "source": "[email protected]", "type": "Secondary"}]}