HTTP: Alibaba Nacos ConfigOpsController Authentication Bypass
This signature detects attempts to exploit a known vulnerability against Alibaba. A successful attack can lead to authentication bypass.
Extended Description
Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql)
Affected Products
Alibaba nacos
References
CVE: CVE-2021-29442
Short Name
HTTP:CTS:NACOS-CNFIG-ABYPASS
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Alibaba Authentication Bypass CVE-2021-29442 ConfigOpsController Nacos
Release Date
08/17/2021
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3410
False Positive
Unknown
Vendors
Alibaba
CVSS Score
5.0