ExploitCVE-2024-6582
Improper Authentication (CWE-287)
Summary
A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known.
Impact
This vulnerability has a high confidentiality impact. An attacker could potentially gain unauthorized access to sensitive information of other organizations, including their SSO metadata. This could lead to account takeovers if the email of a user in the target organization is known. The vulnerability has a CVSS v3 base score of 4.3, which is considered "Medium" severity. The attack vector is network-based, requires low attack complexity, and no user interaction, making it relatively easy to exploit.
Exploitation
One proof-of-concept exploit is available on huntr.com. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. According to the Github Advisory (GHSA-w73r-8mm4-cfvf), the patch was added on 2024-09-13. The vulnerability affects all versions of lunary-ai/lunary up to, but not including, version 1.4.9.
Mitigation
1. Update to version 1.4.9 or later of lunary-ai/lunary as soon as possible. 2. Implement strict access controls and regularly audit user permissions. 3. Monitor for any suspicious activities related to IDP settings changes or SSO metadata access. 4. Implement additional authentication factors for sensitive operations. 5. Regularly review and update SAML configurations. 6. Educate users about the importance of safeguarding their email addresses and credentials.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Timeline
NVD published the first details for CVE-2024-6582
Feedly found the first article mentioning CVE-2024-6582. See article
Feedly estimated the CVSS score as HIGH
A CVSS base score of 6.5 has been assigned.
EPSS Score was set to: 0.04% (Percentile: 9.6%)
Detection for the vulnerability has been added to Qualys (5000971)
A CVSS base score of 4.3 has been assigned.