Detections
Analytics

CentOS 8 : fence-agents (CESA-2024:2968)

medium Nessus Plugin ID 197695

Language:

Synopsis

The remote CentOS host is missing one or more security updates.

Description

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:2968 advisory.

 - urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required by HTTP RFCs.
 Although this behavior is not specified in the section for redirects, it can be inferred by piecing together information from different sections and we have observed the behavior in other major HTTP client implementations like curl and web browsers. Because the vulnerability requires a previously trusted service to become compromised in order to have an impact on confidentiality we believe the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies, if this is the case then this vulnerability isn't exploitable. Both of the following conditions must be true to be affected by this vulnerability: 1. Using urllib3 and submitting sensitive information in the HTTP request body (such as form data or JSON) and 2. The origin service is compromised and starts redirecting using 301, 302, or 303 to a malicious peer or the redirected-to service becomes compromised.
 This issue has been addressed in versions 1.26.18 and 2.0.7 and users are advised to update to resolve this issue. Users unable to update should disable redirects for services that aren't expecting to respond with redirects with `redirects=False` and disable automatic redirects with `redirects=False` and handle 301, 302, and 303 redirects manually by stripping the HTTP request body. (CVE-2023-45803)

 - PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. (CVE-2023-52323)

 - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based.
 (CVE-2024-22195)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://access.redhat.com/errata/RHSA-2024:2968

Plugin Details

Severity: Medium

ID: 197695

File Name: centos8_RHSA-2024-2968.nasl

Version: 1.0

Type: local

Agent: unix

Published: 5/22/2024

Updated: 5/22/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2024-22195

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:centos:centos:fence-agents-openstack, p-cpe:/a:centos:centos:fence-agents-wti, p-cpe:/a:centos:centos:fence-agents-ibm-powervs, p-cpe:/a:centos:centos:fence-agents-brocade, p-cpe:/a:centos:centos:fence-agents-ilo-mp, p-cpe:/a:centos:centos:fence-agents-heuristics-ping, p-cpe:/a:centos:centos:fence-agents-rsa, p-cpe:/a:centos:centos:fence-agents-vmware-soap, p-cpe:/a:centos:centos:fence-agents-ibmblade, p-cpe:/a:centos:centos:fence-agents-mpath, p-cpe:/a:centos:centos:fence-agents-emerson, p-cpe:/a:centos:centos:fence-agents-cisco-ucs, cpe:/o:centos:centos:8-stream, p-cpe:/a:centos:centos:fence-agents-aws, p-cpe:/a:centos:centos:fence-agents-ilo2, p-cpe:/a:centos:centos:fence-agents-cisco-mds, p-cpe:/a:centos:centos:fence-agents-ibm-vpc, p-cpe:/a:centos:centos:fence-agents-drac5, p-cpe:/a:centos:centos:fence-agents-apc, p-cpe:/a:centos:centos:fence-agents-ilo-ssh, p-cpe:/a:centos:centos:fence-agents-kdump, p-cpe:/a:centos:centos:fence-agents-aliyun, p-cpe:/a:centos:centos:fence-agents-compute, p-cpe:/a:centos:centos:fence-agents-hpblade, p-cpe:/a:centos:centos:fence-agents-rsb, p-cpe:/a:centos:centos:fence-agents-eaton-snmp, p-cpe:/a:centos:centos:fence-agents-all, p-cpe:/a:centos:centos:fence-agents-scsi, p-cpe:/a:centos:centos:fence-agents-ilo-moonshot, p-cpe:/a:centos:centos:fence-agents-azure-arm, p-cpe:/a:centos:centos:fence-agents-gce, p-cpe:/a:centos:centos:fence-agents-ipdu, p-cpe:/a:centos:centos:fence-agents-common, p-cpe:/a:centos:centos:fence-agents-ifmib, p-cpe:/a:centos:centos:fence-agents-apc-snmp, p-cpe:/a:centos:centos:fence-agents-rhevm, p-cpe:/a:centos:centos:fence-agents-lpar, p-cpe:/a:centos:centos:fence-agents-vmware-rest, p-cpe:/a:centos:centos:fence-agents-virsh, p-cpe:/a:centos:centos:fence-agents-sbd, p-cpe:/a:centos:centos:fence-agents-ipmilan, p-cpe:/a:centos:centos:fence-agents-kubevirt, p-cpe:/a:centos:centos:fence-agents-redfish, p-cpe:/a:centos:centos:fence-agents-amt-ws, p-cpe:/a:centos:centos:fence-agents-bladecenter, p-cpe:/a:centos:centos:fence-agents-eps, p-cpe:/a:centos:centos:fence-agents-intelmodular

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/CentOS/release, Host/CentOS/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 5/22/2024

Vulnerability Publication Date: 10/17/2023

Reference Information

CVE: CVE-2023-45803, CVE-2023-52323, CVE-2024-22195

RHSA: 2024:2968