CVE-2020-37281— Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

一分钟漏洞结论

复制摘要 复制引用

影响对象

Gravitee Gravitee API Management

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed with the shipped default jwt.secret. Attackers knowing an existing user ID can s

CVE-2020-37281 影响 Gravitee Gravitee API Management。尚无明确在野利用证据，仍需结合暴露面评估。Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed CVE-2020-37281 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2020-37281

一、 漏洞 CVE-2020-37281 基础信息

受影响产品

二、漏洞 CVE-2020-37281 的公开POC

三、漏洞 CVE-2020-37281 的情报信息

CVE-2020-37281 其他参考 (6)

• https://github.com/gravitee-io/issues/issues/4204 issue-tracking
• https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/gravitee-apim-rest-api/gravitee-apim-rest-api-management/gravitee-apim-rest-api-management-security/src/main/java/io/gravitee/rest/api/management/security/config/BasicSecurityConfigurerAd technical-description
• https://github.com/gravitee-io/gravitee-docs/blob/master/pages/apim/3.x/how-tos/how-to-general-configuration.adoc technical-description
• https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/gravitee-apim-rest-api/gravitee-apim-rest-api-standalone/gravitee-apim-rest-api-standalone-distribution/src/main/resources/config/gravitee.yml#L636-L637 technical-description
• https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/helm/values.yaml#L103 technical-description
• https://www.vulncheck.com/advisories/gravitee-api-management-through-4.12.22-default-jwt-secret-authentication-bypass third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2020-37281

IV. Related Vulnerabilities

V. Comments for CVE-2020-37281