Vulnerability · Published Jun 13, 2022 · Assigned by GitHub_M

CVE-2022-31055Improper Access Control in kctf

High 7.5

In plain English

A high-severity improper access control in kctf from google. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.6%top 48.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark them as `public: false` and use `kctf chal debug port-forward` to connect.

Affected products (as reported)

Vendor	Product	Versions
google	kctf	< 1.6.0

Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/google/kctf/security/advisories/GHSA-4g2v-6qc6-6jv5 x_refsource_CONFIRM
https://github.com/google/kctf/pull/371 x_refsource_MISC
https://github.com/google/kctf/commit/8cf050be974fcc2fd8aa136701f9a66f2b2a5202 x_refsource_MISC