Remote Authentication Bypass in Radicale: CVE-2015-8748
Summary
CVE-2015-8748: Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*". Affects radicale versions < 1.1.1-1. Fixed in 1.1.1-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Radicale is an open-source calendar and contact server that implements the WebDAV and CalDAV protocols. It is designed to be simple and easy to use, allowing users to manage their calendars and contacts efficiently. However, prior to version 1.1.1, Radicale had a vulnerability that allowed remote authenticated users to bypass owner_write and owner_only limitations, potentially leading to unauthorized access to sensitive data.
Vulnerability Detail
CVE-2015-8748 is a vulnerability in Radicale that allows remote authenticated users to exploit regex metacharacters in their usernames. This exploitation can lead to unauthorized access to resources that should be restricted, as it bypasses the intended owner-only access controls. The vulnerability arises from improper handling of user input, specifically when regex patterns are used in usernames, which can manipulate access permissions.
How To Fix
Minimum fixed version
1.1.1-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade radicaleTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the Radicale server by implementing additional authentication measures or by limiting user input to disallow regex metacharacters in usernames. This can be achieved by validating usernames before they are processed by the server.
Conclusion
CVE-2015-8748 is a significant vulnerability in Radicale that allows unauthorized access through the manipulation of usernames. It is crucial for users to upgrade to version 1.1.1 or later to mitigate this risk. Additionally, implementing workarounds can provide temporary relief until the upgrade is completed.
See every vulnerability recorded for radicale →
FAQ
CVE-2015-8748 is a vulnerability in Radicale that allows remote authenticated users to bypass access controls using regex metacharacters in their usernames.
You can check your version of Radicale by running 'radicale --version' in your terminal. If it is below 1.1.1, it is affected by this vulnerability.
The vulnerability can lead to unauthorized access to sensitive calendar and contact data, compromising user privacy and data integrity.
Yes, you can use Vulert to monitor and alert in real-time for open-source vulnerabilities in your software. You can check if your application is affected by this vulnerability using the Vulert playground.
The CVSS score for CVE-2015-8748 is 5.3, indicating a moderate level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for radicale.
