matrix-org matrix-rust-sdk up to 0.7.1 is_verified improper authentication

Summaryinfo

A vulnerability was found in matrix-org matrix-rust-sdk up to 0.7.1 and classified as critical. This vulnerability affects the function UserIdentity::is_verified. Executing a manipulation can lead to Remote Privilege Escalation. This vulnerability is tracked as CVE-2024-40648. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in matrix-org matrix-rust-sdk up to 0.7.1 and classified as critical. This vulnerability affects the function UserIdentity::is_verified. The manipulation with an unknown input leads to a remote privilege escalation vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The advisory is shared for download at github.com. This vulnerability was named CVE-2024-40648 since 07/08/2024. The exploitation appears to be easy. The attack can be initiated remotely. There are known technical details, but no exploit is available.

Upgrading to version 0.7.2 eliminates this vulnerability. Applying the patch 76a7052149bb8f722df12da915b3a06d19a6695a is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• matrix-org

Name

• matrix-rust-sdk

Version

• 0.7.0
• 0.7.1

License

• open-source

Website

• Product: https://github.com/matrix-org/matrix-rust-sdk/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion