CVE-2024-38371

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-38371", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-06-14T14:16:16.466Z", "datePublished": "2024-06-28T17:58:48.169Z", "dateUpdated": "2024-08-02T04:04:25.257Z"}, "containers": {"cna": {"title": "Insufficient access control for OAuth2 Device Code flow in authentik", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-285", "lang": "en", "description": "CWE-285: Improper Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}], "affected": [{"vendor": "goauthentik", "product": "authentik", "versions": [{"version": "< 2024.6.0", "status": "affected"}, {"version": "< 2024.4.3", "status": "affected"}, {"version": "< 2024.2.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-28T17:58:48.169Z"}, "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}], "source": {"advisory": "GHSA-jq3m-37m7-gp45", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "goauthentik", "product": "authentik", "cpes": ["cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2024.6.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "2024.4.3", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "2024.2.4", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-28T20:07:42.936032Z", "id": "CVE-2024-38371", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T20:10:55.919Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:04:25.257Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-38371", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-28T20:07:42.936032Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*"], "vendor": "goauthentik", "product": "authentik", "versions": [{"status": "affected", "version": "0", "lessThan": "2024.6.0", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2024.4.3", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "2024.2.4", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T20:10:51.361Z"}}], "cna": {"title": "Insufficient access control for OAuth2 Device Code flow in authentik", "source": {"advisory": "GHSA-jq3m-37m7-gp45", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "goauthentik", "product": "authentik", "versions": [{"status": "affected", "version": "< 2024.6.0"}, {"status": "affected", "version": "< 2024.4.3"}, {"status": "affected", "version": "< 2024.2.4"}]}], "references": [{"url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "name": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "name": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285: Improper Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-06-28T17:58:48.169Z"}}}, "cveMetadata": {"cveId": "CVE-2024-38371", "state": "PUBLISHED", "dateUpdated": "2024-06-28T20:10:55.919Z", "dateReserved": "2024-06-14T14:16:16.466Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-06-28T17:58:48.169Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "authentik", "vendor": "goauthentik", "versions": [{"status": "affected", "version": "< 2024.6.0"}, {"status": "affected", "version": "< 2024.4.3"}, {"status": "affected", "version": "< 2024.2.4"}]}], "source": "security-advisories@github.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "authentik", "vendor": "goauthentik", "versions": [{"lessThan": "2024.6.0", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "2024.4.3", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "2024.2.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED1F1937-A547-440E-8D37-5830973FDB91", "versionEndExcluding": "2024.2.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB436255-F93A-4090-96AE-3AF72C6F68E2", "versionEndExcluding": "2024.4.3", "versionStartIncluding": "2024.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been patched in version(s) 2024.6.0, 2024.2.4 and 2024.4.3."}, {"lang": "es", "value": "authentik es un proveedor de identidades de c\u00f3digo abierto. Las restricciones de acceso asignadas a una aplicaci\u00f3n no se verificaron cuando se utiliz\u00f3 el flujo de c\u00f3digo del dispositivo OAuth2. Potencialmente, esto podr\u00eda permitir a los usuarios sin la autorizaci\u00f3n correcta obtener tokens OAuth para una aplicaci\u00f3n y acceder a ella. Este problema se solucion\u00f3 en las versiones 2024.6.0, 2024.2.4 y 2024.4.3."}], "id": "CVE-2024-38371", "lastModified": "2026-06-17T07:40:00.747", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-38371", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-06-28T20:07:42.936032Z", "version": "2.0.3"}}]}, "published": "2024-06-28T18:15:04.647", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.2.4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.4.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/goauthentik/authentik/releases/tag/version%2F2024.6.0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-jq3m-37m7-gp45"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-285"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{}