CVE-2023-34409
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths, allowing path traversal attacks. This enables an unauthenticated remote user to access protected API routes, leading to privilege escalation and information disclosure.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data and the potential for privilege escalation by malicious users, which could lead to serious security breaches.
Recommendation
It is recommended to update the PMM server to version 2.37.1 or later to mitigate this vulnerability and implement additional security measures such as monitoring and restricting access to the API.
Original NVD description (English source)
In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path traversal attempts. This allows an unauthenticated remote user, when a crafted POST request is made against unauthenticated API routes, to access otherwise protected API routes leading to escalation of privileges and information disclosure.