CVE-2023-32696
These issues allowed for code execution or privilege escalation if an arbitrary file write bug was available.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.79%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissions to use sudo. These issues allowed for code execution or privilege escalation if an arbitrary file write bug was available. Versions 2.9.9, 2.9.9-dev, 2.10.1, and 2.10.1-dev contain a patch.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.79% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- okfn/ckan
- Source
- security-advisories@github.com
References
- https://github.com/ckan/ckan-docker-base/commit/5483c46ce9b518a4e1b626ef7032cce2c1d75c7dPatch
- https://github.com/ckan/ckan-docker-base/security/advisories/GHSA-c74x-xfvr-x5wgVendor Advisory
- https://github.com/ckan/ckan-docker-base/commit/5483c46ce9b518a4e1b626ef7032cce2c1d75c7dPatch
- https://github.com/ckan/ckan-docker-base/security/advisories/GHSA-c74x-xfvr-x5wgVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.