CVE-2023-51982

Summary

CVE-2023-51982 is a newly discovered vulnerability affecting CrateDB 5.5.1. This issue involves an authentication bypass flaw in the Admin UI component. After implementing password authentication, an attacker can bypass identity authentication by manipulating the X-Real-IP request header and accessing the Admin UI with the default user identity directly. This vulnerability poses a significant risk, as it allows unauthorized access to sensitive administrative functions. It is recommended that users of CrateDB 5.5.1 upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.