Lucene search

GitHub_MCVE-2022-24853

HistoryApr 14, 2022 - 10:15 p.m.

CVE-2022-24853

2022-04-1422:15:08

CWE-200

GitHub_M

web.nvd.nist.gov

metabase

open source

business intelligence

analytics

cve-2022-24853

vulnerability

ntlm relay attack

windows

geojson

upgrade

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case where a particularly crafted request could result in file access on windows, which allows enabling an NTLM relay attack, potentially allowing an attacker to receive the system password hash. If you use Windows and are on this version of Metabase, please upgrade immediately. The following patches (or greater versions) are available: 0.42.4 and 1.42.4, 0.41.7 and 1.41.7, 0.40.8 and 1.40.8.

Affected configurations

Nvd

Vulners

Node

metabasemetabaseRange0.40.0–0.40.8

metabasemetabaseRange0.41.0–0.41.7

metabasemetabaseRange0.42.0–0.42.4

metabasemetabaseRange1.40.0–1.40.8

metabasemetabaseRange1.41.0–1.41.7

metabasemetabaseRange1.42.0–1.42.4

VendorProductVersionCPE
metabasemetabase*cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
metabase	metabase	*	cpe:2.3:a:metabase:metabase::::::::

CNA Affected

[
  {
    "product": "metabase",
    "vendor": "metabase",
    "versions": [
      {
        "status": "affected",
        "version": ">= 1.40.0, < 1.40.7"
      },
      {
        "status": "affected",
        "version": ">= 0.40.0, < 0.40.7"
      },
      {
        "status": "affected",
        "version": ">= 1.41.0, < 1.41.6"
      },
      {
        "status": "affected",
        "version": ">= 0.41.0, < 0.41.6"
      },
      {
        "status": "affected",
        "version": ">= 1.42.0, < 1.42.3"
      },
      {
        "status": "affected",
        "version": ">= 0.42.0, < 0.42.3"
      }
    ]
  }
]

References

github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m

secure77.de/metabase-ntlm-relay-attack/

www.qomplx.com/qomplx-knowledge-ntlm-relay-attacks-explained/

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

Related for CVE-2022-24853