This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: FIWARE Keyrock has an **OS Command Injection** flaw. <br>๐ฅ **Consequences**: Attackers can execute arbitrary commands on the server.โฆ
๐ก๏ธ **Root Cause**: **CWE-78** (OS Command Injection). <br>๐ **Flaw**: The function `generate_app_certificates` in `lib/app_certificates.js` fails to properly **sanitize** user input. Malicious payloads slip through.
Q3Who is affected? (Versions/Components)
๐ข **Vendor**: FIWARE. <br>๐ฆ **Product**: FIWARE Keyrock (Identity Management Component). <br>๐ **Affected**: Versions **8.4 and earlier**. Newer versions may be safe.
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Capabilities**: <br>1. **Execute OS Commands**: Full control over the underlying OS. <br>2. **Data Access**: Read sensitive identity data. <br>3.โฆ
๐ **Exploitation Threshold**: **Medium**. <br>๐ **Auth Required**: **PR:H** (High Privileges Required). You need valid credentials to access the Keyrock API. <br>๐ **Network**: **AV:N** (Network exploitable).
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ข **Public Exploit**: **No**. <br>๐ซ **PoC**: The `pocs` field is empty. <br>โ ๏ธ **Risk**: While no public PoC exists, the CVSS score is **Critical (9.8)**. Wild exploitation is likely once details are reverse-engineered.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: <br>1. Check Keyrock version (`< 8.4`). <br>2. Inspect `lib/app_certificates.js` for unsanitized inputs in `generate_app_certificates`. <br>3.โฆ
๐ ๏ธ **Official Fix**: **Yes**. <br>๐ฆ **Mitigation**: Upgrade to a version **newer than 8.4**. The vendor has acknowledged the issue (Reference: ait.ac.at).
Q9What if no patch? (Workaround)
๐ง **No Patch Workaround**: <br>1. **Restrict Access**: Limit API access to trusted IPs only. <br>2. **Input Validation**: Manually patch `lib/app_certificates.js` to sanitize inputs. <br>3.โฆ
๐ฅ **Urgency**: **CRITICAL**. <br>โณ **Priority**: **Immediate Action Required**. <br>๐ก **Reason**: CVSS 9.8 + Network Access + High Impact. Even without public PoC, the risk is extreme. Patch ASAP.