VulnerabilityAnalyzed

CVE-2024-39924

A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access.

HIGH 8.8EPSS 13.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 13.3%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 13.33% probability · 96th percentile
CISA KEV: Not listed
Weakness: CWE-276
Affected: dani-garcia/vaultwarden
Source: cve@mitre.org

References

https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/api/core/emergency_access.rs#L115-L148Product
https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0Release Notes
https://www.mgm-sp.com/cve/missing-authentication-check-for-emergency-accessThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.