Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unity Catalog has a JWT Issuer Validation Bypass Allows Complete User Impersonation
Vulnerability Description
Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.0/unity-control/auth/tokens). The endpoint extracts the issuer (iss) claim from incoming JWTs and uses it to dynamically fetch the JWKS endpoint for signature validation without validating that the issuer is a trusted identity provider.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
Unity Catalog 安全漏洞
Vulnerability Description
Unity Catalog是unitycatalog开源的一个多模态数据与AI资产统一治理目录。 Unity Catalog 0.4.0及之前版本存在安全漏洞，该漏洞源于身份验证绕过漏洞，可能导致攻击者绕过签名验证。
CVSS Information
N/A
Vulnerability Type
N/A