Vulnerability · Published Oct 24, 2023 · Assigned by GitHub_M

CVE-2023-46128Exposure of hashed user passwords via REST API in Nautobot

Medium 6.5

In plain English

A medium-severity information exposure in nautobot from nautobot. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.7%top 47.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Nautobot is a Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 2.0.x, certain REST API endpoints, in combination with the `?depth=<N>` query parameter, can expose hashed user passwords as stored in the database to any authenticated user with access to these endpoints. The passwords are not exposed in plaintext. This vulnerability has been patched in version 2.0.3.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	nautobot	2.0.3	GHSA-r2hw-74xv-4gqp
PyPI	nautobot	2.0.3	PYSEC-2023-220

Affected products (as reported)

Vendor	Product	Versions
nautobot	nautobot	>= 2.0.0, < 2.0.3

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/nautobot/nautobot/security/advisories/GHSA-r2hw-74xv-4gqp x_refsource_CONFIRM
https://github.com/nautobot/nautobot/pull/4692 x_refsource_MISC
https://github.com/nautobot/nautobot/commit/1ce8e5c658a075c29554d517cd453675e5d40d71 x_refsource_MISC