From 0001d9ebaa353b2e7d93c51352377fd378f629f4 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 22 Aug 2024 16:40:58 +0000
Subject: [PATCH] Publish GHSA-qxqc-27pr-wgc8

---
 .../GHSA-qxqc-27pr-wgc8.json                  | 88 +++++++++++++++++++
 1 file changed, 88 insertions(+)
 create mode 100644 advisories/github-reviewed/2024/08/GHSA-qxqc-27pr-wgc8/GHSA-qxqc-27pr-wgc8.json

diff --git a/advisories/github-reviewed/2024/08/GHSA-qxqc-27pr-wgc8/GHSA-qxqc-27pr-wgc8.json b/advisories/github-reviewed/2024/08/GHSA-qxqc-27pr-wgc8/GHSA-qxqc-27pr-wgc8.json
new file mode 100644
index 00000000000..329aba5cdd6
--- /dev/null
+++ b/advisories/github-reviewed/2024/08/GHSA-qxqc-27pr-wgc8/GHSA-qxqc-27pr-wgc8.json
@@ -0,0 +1,88 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qxqc-27pr-wgc8",
+  "modified": "2024-08-22T16:39:25Z",
+  "published": "2024-08-22T16:39:25Z",
+  "aliases": [
+    "CVE-2024-42490"
+  ],
+  "summary": "GoAuthentik vulnerable to Insufficient Authorization for several API endpoints",
+  "details": "### Summary\n\nSeveral API endpoints can be accessed by users without correct authentication/authorization.\n\nThe main API endpoints affected by this:\n\n-   `/api/v3/crypto/certificatekeypairs/<uuid>/view_certificate/`\n-   `/api/v3/crypto/certificatekeypairs/<uuid>/view_private_key/`\n-   `/api/v3/.../used_by/`\n\nNote that all of the affected API endpoints require the knowledge of the ID of an object, which especially for certificates is not accessible to an unprivileged user. Additionally the IDs for most objects are UUIDv4, meaning they are not easily guessable/enumerable.\n\n### Patches\n\nauthentik 2024.4.4, 2024.6.4 and 2024.8.0 fix this issue.\n\n### Workarounds\n\nAccess to the API endpoints can be blocked at a Reverse-proxy/Load balancer level to prevent this issue from being exploited.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n-   Email us at [security@goauthentik.io](mailto:security@goauthentik.io)\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "goauthentik.io"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2024.6.0-rc1"
+            },
+            {
+              "fixed": "2024.6.4"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "goauthentik.io"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2024.4.4"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/goauthentik/authentik/security/advisories/GHSA-qxqc-27pr-wgc8"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goauthentik/authentik/commit/19318d4c00bb02c4ec3c4f8f15ac2e1dbe8d846c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goauthentik/authentik/commit/359b343f51524342a5ca03828e7c975a1d654b11"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/goauthentik/authentik"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-08-22T16:39:25Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file