GitHub Advisoryadvisory · PyPI

GHSA-vhmj-5q9r-mm9g BlastRADIUS also affects eduMFA

MEDIUM Published 2024-07-17 Modified 2024-07-17 Official page ↗
Ecosystem
PyPI
Packages
edumfa
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-924
Reviewed
2024-07-17

Affected packages

• PyPI edumfa: < 2.2.0 → fixed in 2.2.0

Description

Summary BlastRADIUS (see blastradius.fail for details) also affects eduMFA prior version 2.2.0, because the Message-Authenticator attributes were not checked. Details Website with the vulnerability information blastradius.fail The original vulnerability has been assigned CVE-2024-3596 Case in vince: https://kb.cert.org/vuls/id/456537 PoC There is no known proof-of-concept except for the attack shown in the paper from the researchers Impact An attacker can trigger an authentication flow with a RADIUS-backed token, intercept the RADIUS packet sent by eduMFA and modify the RADIUS server's answer, which would lead eduMFA to believe that the token is valid, even though the RADIUS servers answer was a reject.

Related

Weakness · CWE (1)

  • CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel weakness

References