Action: updated
Advisory ID: GHSA-864v-6qj7-62qj
CVE ID: CVE-2023-23612
Summary: Issue with whitespace in JWT roles in OpenSearch
Severity: Moderate
Description
OpenSearch uses JWTs to store role claims obtained from the Identity Provider (IdP) when the authentication backend is SAML or OpenID Connect. There is an issue in how those claims are processed from the JWTs where the leading and trailing whitespace is trimmed, allowing users to potentially claim roles they are not assigned to if any role matches the whitespace-stripped version of the roles they are a member of.
Patched versions: OpenSearch 1.3.8 and 2.5.0
Affected Versions
- OpenSearch 1.0.0-1.3.7
- OpenSearch 2.0.0-2.4.1
Patched Versions
- 1.3.8
- 2.5.0
Vulnerabilities
- Package: org.opensearch.plugin:opensearch-security
- Severity: Moderate
- Vulnerable Version Ranges: 1.3.8, >=2.0.0 and <=2.5.0
References
CVSS Details
Vector String: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Score: 4.7