Cross-site request forgery in GnuPG - CVE-2018-1000858
Published: January 10, 2019 / Updated: January 13, 2019
Vulnerability identifier: #VU16937
CSH Severity: Low
CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1000858
CWE-ID: CWE-352
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform cross-site request forgery attacks.
The vulnerability exists due to insufficient validation of the HTTP request origin within dirmngr. A remote attacker can trick the victim to perform a WKD request (enter an email address in the composer window of Thunderbird/Enigmail) and perform arbitrary actions on behalf of the victim.
Affected software
GnuPG
Service Telemetry Framework
Migration Toolkit for Containers
Red Hat OpenShift Serverless
Opensuse
Fedora
gnupg2
Service Telemetry Framework
Migration Toolkit for Containers
Red Hat OpenShift Serverless
Opensuse
Fedora
gnupg2
How to mitigate CVE-2018-1000858
Install updates from vendor's website.
Migration Toolkit for Containers - update to 1.7.3
Red Hat OpenShift Serverless - update to 1.10.2
gnupg2 - addressed in versions 2.2.12-1.fc28, 2.2.12-1.fc29
Red Hat OpenShift Serverless - update to 1.10.2
gnupg2 - addressed in versions 2.2.12-1.fc28, 2.2.12-1.fc29