Vulnerability · Published Jul 26, 2021 · Assigned by GitHub_M

CVE-2021-32631JSON Web Tokens not properly verified

Medium 6.5

In plain English

A medium-severity authentication bypass by spoofing in common from nimble-platform. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.1%top 34.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authentication bypasses. Commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 contains a patch for the issue. As a workaround, one may use the parseClaimsJws method to correctly verify the signature of a JWT.

Affected products (as reported)

Vendor	Product	Versions
nimble-platform	common	< 3b96cb0293d3443b870351945f41d7d55cb34b53

Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

https://github.com/nimble-platform/common/security/advisories/GHSA-fjq8-896w-pv28 x_refsource_CONFIRM
https://github.com/nimble-platform/common/commit/12197a755bd524559bf4e16475595a2c6fcd34db x_refsource_MISC
https://github.com/nimble-platform/common/commit/3b96cb0293d3443b870351945f41d7d55cb34b53 x_refsource_MISC
https://github.com/nimble-platform/common/commit/a59ad46733912a5580530e39cac0e6ebc83cc563 x_refsource_MISC