Krill login-session tokens reuse encryption nonce, allowing admin token forgery
Any user who can log in could take admin rights.
Summary
Krill reuses the encryption nonce of login-session tokens across restarts. Any user who can log in can forge an admin token. Versions up to and including 0.16.0 are affected.
Affected when
- Krill up to and including 0.16.0
- a user account that can log in
What to do
Update to Krill 0.16.1 or later.
Products and platforms
CVE IDs
Sources
- Advisory: nlnetlabs.nl (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen