CVE-2020-10591: Exposure of Sensitive Information to an Unauthorized Actor in Concord
Summary
CVE-2020-10591: Exposure of Sensitive Information to an Unauthorized Actor in Concord. Affects com.walmartlabs.concord:concord-common versions < 1.44.0. Fixed in 1.44.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Concord is an open-source workflow server developed by Walmart Labs. It is used for orchestrating and managing complex workflows. The vulnerable package, concord-common, is a component of Concord that handles Docker-related functionality. It is written in Java and follows the Maven ecosystem.
Vulnerability Detail
The vulnerability in Concord versions before 1.44.0 involves a Cross-Origin Resource Sharing (CORS) misconfiguration. The Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers and are not configurable. This allows remote attackers to exploit the misconfiguration and gain access to sensitive information. Specifically, attackers can discover host information, nodes, API metadata, and references to usernames by sending requests to the api/v1/apikey endpoint.
How To Fix
Minimum fixed version
1.44.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version as soon as possible.
Conclusion
The vulnerability in Concord versions before 1.44.0 exposes sensitive information to unauthorized actors. To mitigate this issue, it is crucial to upgrade Concord to version 1.44.0 or later. No known workarounds are available, so upgrading to the fixed version is the recommended solution. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for com.walmartlabs.concord:concord-common →
FAQ
The vulnerability allows unauthorized actors to access sensitive information, including host details, API metadata, and references to usernames. This can lead to potential data breaches and unauthorized access to the system.
While there are no known public exploits for this vulnerability at the moment, it is crucial to address it promptly to prevent potential attacks.
No, only versions of Concord before 1.44.0 are affected. It is recommended to upgrade to the latest version to mitigate the vulnerability.
Yes, the CVSS score for this vulnerability is 7.5, indicating a high severity level.
You can find more information about this vulnerability in the GitHub Advisory Database at the following link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-6566-9526-52v6/GHSA-6566-9526-52v6.json
