Server-Side Request Forgery (SSRF) in Netmask - CVE-2021-29418,CVE-2021-28918
Published: March 29, 2021 / Updated: April 7, 2021
Vulnerability identifier: #VU51767
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2021-29418,CVE-2021-28918
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The disclosed vulnerability allows a remote attacker to perform SSRF attacks.
The vulnerability exists due to insufficient validation of user-supplied input in octal literals. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.
Successful exploitation of this vulnerability may allow a remote attacker gain access to intranets, VPNs, containers, adjacent VPC instances, or LAN hosts.
Affected software
Netmask
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Automation Manager
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Automation Manager
How to mitigate CVE-2021-29418,CVE-2021-28918
Install updates from vendor's website.
Netmask - update to 2.0.1
Red Hat Advanced Cluster Management for Kubernetes - update to 2.2.3
Red Hat Advanced Cluster Management for Kubernetes - update to 2.2.3