CVE-2024-0822 - Vulnerability Details - OpenCVE

ReportizFlow

An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Ovirt	Ovirt-engine
Redhat	Rhev Manager

Configuration 1 [-]

cpe:2.3:a:ovirt:ovirt-engine:-:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Virtualization Engine 4.4
ovirt-engine-0:4.5.3.10-1.el8ev	cpe:/a:redhat:rhev_manager:4.4:el8	RHSA-2024:0934	2024-02-21T00:00:00Z

References

Link	Providers
https://access.redhat.com/errata/RHSA-2024:0934
https://access.redhat.com/security/cve/CVE-2024-0822
https://bugzilla.redhat.com/show_bug.cgi?id=2258509
https://github.com/oVirt/ovirt-engine/pull/914
https://nvd.nist.gov/vuln/detail/CVE-2024-0822
https://www.cve.org/CVERecord?id=CVE-2024-0822

History

Sun, 24 Nov 2024 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2024-01-25T15:18:20.439Z

Updated: 2024-11-24T12:16:28.423Z

Reserved: 2024-01-23T14:15:45.514Z

Link: CVE-2024-0822

Vulnrichment

Updated: 2024-08-01T18:18:18.983Z

NVD

Status : Modified

Published: 2024-01-25T16:15:08.743

Modified: 2024-11-21T08:47:26.913

Link: CVE-2024-0822

Redhat

Severity : Important

Publid Date: 2024-01-15T00:00:00Z

Links: CVE-2024-0822 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-0822", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2024-01-23T14:15:45.514Z", "datePublished": "2024-01-25T15:18:20.439Z", "dateUpdated": "2024-11-24T12:16:28.423Z"}, "containers": {"cna": {"title": "Ovirt: authentication bypass", "metrics": [{"other": {"content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command."}], "affected": [{"versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.6", "versionType": "semver"}], "packageName": "ovirt-engine", "collectionURL": "https://ovirt.org/", "defaultStatus": "unaffected"}, {"vendor": "Red Hat", "product": "Red Hat Virtualization Engine 4.4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "ovirt-engine", "defaultStatus": "affected", "versions": [{"version": "0:4.5.3.10-1.el8ev", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhev_manager:4.4:el8"]}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:0934", "name": "RHSA-2024:0934", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2024-0822", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509", "name": "RHBZ#2258509", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://github.com/oVirt/ovirt-engine/pull/914"}], "datePublic": "2024-01-15T00:00:00+00:00", "problemTypes": [{"descriptions": [{"cweId": "CWE-1390", "description": "Weak Authentication", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-1390: Weak Authentication", "timeline": [{"lang": "en", "time": "2024-01-15T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-01-15T00:00:00+00:00", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2024-11-24T12:16:28.423Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:18:18.983Z"}, "title": "CVE Program Container", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:0934", "name": "RHSA-2024:0934", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://access.redhat.com/security/cve/CVE-2024-0822", "tags": ["vdb-entry", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509", "name": "RHBZ#2258509", "tags": ["issue-tracking", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://github.com/oVirt/ovirt-engine/pull/914", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-12T18:40:10.525825Z", "id": "CVE-2024-0822", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-12T18:41:28.359Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:0934", "name": "RHSA-2024:0934", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://access.redhat.com/security/cve/CVE-2024-0822", "tags": ["vdb-entry", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509", "name": "RHBZ#2258509", "tags": ["issue-tracking", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://github.com/oVirt/ovirt-engine/pull/914", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:18:18.983Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0822", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-12T18:40:10.525825Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-12T18:40:22.116Z"}}], "cna": {"title": "Ovirt: authentication bypass", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.6", "versionType": "semver"}], "packageName": "ovirt-engine", "collectionURL": "https://ovirt.org/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:rhev_manager:4.4:el8"], "vendor": "Red Hat", "product": "Red Hat Virtualization Engine 4.4", "versions": [{"status": "unaffected", "version": "0:4.5.3.10-1.el8ev", "lessThan": "*", "versionType": "rpm"}], "packageName": "ovirt-engine", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2024-01-15T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-01-15T00:00:00+00:00", "value": "Made public."}], "datePublic": "2024-01-15T00:00:00+00:00", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:0934", "name": "RHSA-2024:0934", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2024-0822", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509", "name": "RHBZ#2258509", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://github.com/oVirt/ovirt-engine/pull/914"}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1390", "description": "Weak Authentication"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2024-11-24T12:16:28.423Z"}, "x_redhatCweChain": "CWE-1390: Weak Authentication"}}, "cveMetadata": {"cveId": "CVE-2024-0822", "state": "PUBLISHED", "dateUpdated": "2024-11-24T12:16:28.423Z", "dateReserved": "2024-01-23T14:15:45.514Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2024-01-25T15:18:20.439Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ovirt:ovirt-engine:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF146A38-CD7E-4A6D-9343-EB0ACA61D5EC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en overt-engine. Este fallo permite la creaci\u00f3n de usuarios en el sistema sin autenticaci\u00f3n debido a un fallo en el comando CreateUserSession."}], "id": "CVE-2024-0822", "lastModified": "2024-11-21T08:47:26.913", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2024-01-25T16:15:08.743", "references": [{"source": "[email protected]", "url": "https://access.redhat.com/errata/RHSA-2024:0934"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2024-0822"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509"}, {"source": "[email protected]", "url": "https://github.com/oVirt/ovirt-engine/pull/914"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2024:0934"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2024-0822"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258509"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/oVirt/ovirt-engine/pull/914"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1390"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "[email protected]", "type": "Primary"}]}