CVE-2022-31177 : Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The response would not include the hashed passwords, but an attacker could infer partial password hashes and their respective users. This issue has been fixed in version 4.1.3. Users are advised to upgrade. There are no known workarounds for this issue.

Published 2022-08-01 19:15:08

Updated 2023-07-24 13:08:08

Source GitHub, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2022-31177

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 16 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-31177

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.7	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N	1.2	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
2.7	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N	1.2	1.4	GitHub, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2022-31177

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: security-advisories@github.com (Secondary)

CWE-916 Use of Password Hash With Insufficient Computational Effort

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-31177

https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc

Possible to infer sensitive information through query strings · Advisory · dpgaspar/Flask-AppBuilder · GitHub
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3

Release 4.1.3 · dpgaspar/Flask-AppBuilder · GitHub
Release Notes;Third Party Advisory

Products affected by CVE-2022-31177

Flask-appbuilder Project » Flask-appbuilder
Versions before (<) 4.1.3
cpe:2.3:a:flask-appbuilder_project:flask-appbuilder:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2022-31177

Exploit prediction scoring system (EPSS) score for CVE-2022-31177

CVSS scores for CVE-2022-31177

CWE ids for CVE-2022-31177

References for CVE-2022-31177

Products affected by CVE-2022-31177