CVE-2023-48707

Cleartext Storage of Sensitive Information in codeigniter4/shield

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow had access to the data in the database, they could use the key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CodeIgniter Shield es un proveedor de autenticación y autorización para CodeIgniter 4. El valor `secretKey` es una clave importante para la autenticación HMAC SHA256 y en las versiones afectadas se almacenaba en la base de datos en forma de texto plano. Si una persona malintencionada de alguna manera tuviera acceso a los datos de la base de datos, podría usar la clave y la clave secreta para la autenticación HMAC SHA256 para enviar solicitudes haciéndose pasar por ese usuario correspondiente. Este problema se solucionó en la versión 1.0.0-beta.8. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-11-17 CVE Reserved
2023-11-24 CVE Published
2024-08-02 CVE Updated
2024-10-24 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-312: Cleartext Storage of Sensitive Information

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f	2023-11-30

URL	Date	SRC
https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x	2023-11-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta2		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta3		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta4		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta5		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta6		Affected
Codeigniter Search vendor "Codeigniter"		Shield Search vendor "Codeigniter" for product "Shield"				1.0.0 Search vendor "Codeigniter" for product "Shield" and version "1.0.0"		beta7		Affected