Vulnerabilities > CVE-2022-31145 - Insufficient Session Expiration vulnerability in Flyte Flyteadmin

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

flyte

CWE-613

NVD

Published: 2022-07-13

Updated: 2022-07-20

Summary

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin as the OAuth2 Authorization Server are unaffected by this issue. A patch is available on the `master` branch of the repository. As a workaround, rotating signing keys immediately will invalidate all open sessions and force all users to attempt to obtain new tokens. Those who use this workaround should continue to rotate keys until FlyteAdmin has been upgraded and hide FlyteAdmin deployment ingress URL from the internet.

Vulnerable Configurations

Part	Description	Count
Application	Flyte Flyte Flyteadmin - Flyte Flyteadmin 0.1.0 Flyte Flyteadmin 0.1.1 Flyte Flyteadmin 0.1.3 Flyte Flyteadmin 0.1.4 Flyte Flyteadmin 0.1.5 Flyte Flyteadmin 0.1.6 Flyte Flyteadmin 0.1.7 Flyte Flyteadmin 0.2.0 Flyte Flyteadmin 0.2.1 Flyte Flyteadmin 0.2.2 Flyte Flyteadmin 0.2.3 Flyte Flyteadmin 0.2.4 Flyte Flyteadmin 0.2.5 Flyte Flyteadmin 0.2.6 Flyte Flyteadmin 0.2.7 Flyte Flyteadmin 0.2.8 Flyte Flyteadmin 0.2.9 Flyte Flyteadmin 0.2.10 Flyte Flyteadmin 0.2.11 Flyte Flyteadmin 0.2.12 Flyte Flyteadmin 0.3.0 Flyte Flyteadmin 0.3.1 Flyte Flyteadmin 0.3.2 Flyte Flyteadmin 0.3.3 Flyte Flyteadmin 0.3.4 Flyte Flyteadmin 0.3.5 Flyte Flyteadmin 0.3.6 Flyte Flyteadmin 0.3.7 Flyte Flyteadmin 0.3.8 Flyte Flyteadmin 0.3.9 Flyte Flyteadmin 0.3.10 Flyte Flyteadmin 0.3.11 Flyte Flyteadmin 0.3.12 Flyte Flyteadmin 0.3.13 Flyte Flyteadmin 0.3.14 Flyte Flyteadmin 0.3.15 Flyte Flyteadmin 0.3.16 Flyte Flyteadmin 0.3.17 Flyte Flyteadmin 0.3.18 Flyte Flyteadmin 0.3.19 Flyte Flyteadmin 0.3.20 Flyte Flyteadmin 0.3.21 Flyte Flyteadmin 0.3.22 Flyte Flyteadmin 0.3.23 Flyte Flyteadmin 0.3.24 Flyte Flyteadmin 0.3.25 Flyte Flyteadmin 0.3.26 Flyte Flyteadmin 0.3.27 Flyte Flyteadmin 0.3.28 Flyte Flyteadmin 0.3.29 Flyte Flyteadmin 0.3.30 Flyte Flyteadmin 0.3.31 Flyte Flyteadmin 0.3.32 Flyte Flyteadmin 0.3.33 Flyte Flyteadmin 0.3.34 Flyte Flyteadmin 0.3.35 Flyte Flyteadmin 0.3.36 Flyte Flyteadmin 0.3.37 Flyte Flyteadmin 0.3.38 Flyte Flyteadmin 0.3.39 Flyte Flyteadmin 0.3.40 Flyte Flyteadmin 0.3.41 Flyte Flyteadmin 0.3.42 Flyte Flyteadmin 0.3.43 Flyte Flyteadmin 0.4.0 Flyte Flyteadmin 0.4.1 Flyte Flyteadmin 0.4.2 Flyte Flyteadmin 0.4.3 Flyte Flyteadmin 0.4.4 Flyte Flyteadmin 0.4.5 Flyte Flyteadmin 0.4.6 Flyte Flyteadmin 0.4.7 Flyte Flyteadmin 0.4.8 Flyte Flyteadmin 0.4.9 Flyte Flyteadmin 0.4.10 Flyte Flyteadmin 0.4.11 Flyte Flyteadmin 0.4.12 Flyte Flyteadmin 0.4.13 Flyte Flyteadmin 0.4.14 Flyte Flyteadmin 0.4.15 Flyte Flyteadmin 0.4.16 Flyte Flyteadmin 0.4.17 Flyte Flyteadmin 0.5.0 Flyte Flyteadmin 0.5.1 Flyte Flyteadmin 0.5.2 Flyte Flyteadmin 0.5.3 Flyte Flyteadmin 0.5.4 Flyte Flyteadmin 0.5.5 Flyte Flyteadmin 0.5.6 Flyte Flyteadmin 0.5.7 Flyte Flyteadmin 0.5.8 Flyte Flyteadmin 0.5.9 Flyte Flyteadmin 0.5.10 Flyte Flyteadmin 0.5.11 Flyte Flyteadmin 0.5.12 Flyte Flyteadmin 0.6.0 Flyte Flyteadmin 0.6.1 Flyte Flyteadmin 0.6.2 Flyte Flyteadmin 0.6.3 Flyte Flyteadmin 0.6.4 Flyte Flyteadmin 0.6.5 Flyte Flyteadmin 0.6.6 Flyte Flyteadmin 0.6.7 Flyte Flyteadmin 0.6.8 Flyte Flyteadmin 0.6.9 Flyte Flyteadmin 0.6.10 Flyte Flyteadmin 0.6.11 Flyte Flyteadmin 0.6.12 Flyte Flyteadmin 0.6.13 Flyte Flyteadmin 0.6.14 Flyte Flyteadmin 0.6.15 Flyte Flyteadmin 0.6.16 Flyte Flyteadmin 0.6.17 Flyte Flyteadmin 0.6.18 Flyte Flyteadmin 0.6.19 Flyte Flyteadmin 0.6.20 Flyte Flyteadmin 0.6.21 Flyte Flyteadmin 0.6.22 Flyte Flyteadmin 0.6.23 Flyte Flyteadmin 0.6.24 Flyte Flyteadmin 0.6.25 Flyte Flyteadmin 0.6.26 Flyte Flyteadmin 0.6.27 Flyte Flyteadmin 0.6.28 Flyte Flyteadmin 0.6.29 Flyte Flyteadmin 0.6.30 Flyte Flyteadmin 0.6.31 Flyte Flyteadmin 0.6.32 Flyte Flyteadmin 0.6.33 Flyte Flyteadmin 0.6.34 Flyte Flyteadmin 0.6.35 Flyte Flyteadmin 0.6.36 Flyte Flyteadmin 0.6.37 Flyte Flyteadmin 0.6.38 Flyte Flyteadmin 0.6.39 Flyte Flyteadmin 0.6.40 Flyte Flyteadmin 0.6.41 Flyte Flyteadmin 0.6.42 Flyte Flyteadmin 0.6.43 Flyte Flyteadmin 0.6.44 Flyte Flyteadmin 0.6.45 Flyte Flyteadmin 0.6.46 Flyte Flyteadmin 0.6.47 Flyte Flyteadmin 0.6.48 Flyte Flyteadmin 0.6.49 Flyte Flyteadmin 0.6.50 Flyte Flyteadmin 0.6.51 Flyte Flyteadmin 0.6.52 Flyte Flyteadmin 0.6.53 Flyte Flyteadmin 0.6.54 Flyte Flyteadmin 0.6.55 Flyte Flyteadmin 0.6.56 Flyte Flyteadmin 0.6.57 Flyte Flyteadmin 0.6.58 Flyte Flyteadmin 0.6.59 Flyte Flyteadmin 0.6.60 Flyte Flyteadmin 0.6.61 Flyte Flyteadmin 0.6.62 Flyte Flyteadmin 0.6.63 Flyte Flyteadmin 0.6.64 Flyte Flyteadmin 0.6.65 Flyte Flyteadmin 0.6.66 Flyte Flyteadmin 0.6.67 Flyte Flyteadmin 0.6.68 Flyte Flyteadmin 0.6.69 Flyte Flyteadmin 0.6.70 Flyte Flyteadmin 0.6.71 Flyte Flyteadmin 0.6.72 Flyte Flyteadmin 0.6.73 Flyte Flyteadmin 0.6.74 Flyte Flyteadmin 0.6.75 Flyte Flyteadmin 0.6.76 Flyte Flyteadmin 0.6.77 Flyte Flyteadmin 0.6.78 Flyte Flyteadmin 0.6.79 Flyte Flyteadmin 0.6.80 Flyte Flyteadmin 0.6.81 Flyte Flyteadmin 0.6.82 Flyte Flyteadmin 0.6.83 Flyte Flyteadmin 0.6.84 Flyte Flyteadmin 0.6.85 Flyte Flyteadmin 0.6.86 Flyte Flyteadmin 0.6.87 Flyte Flyteadmin 0.6.88 Flyte Flyteadmin 0.6.89 Flyte Flyteadmin 0.6.90 Flyte Flyteadmin 0.6.91 Flyte Flyteadmin 0.6.92 Flyte Flyteadmin 0.6.93 Flyte Flyteadmin 0.6.94 Flyte Flyteadmin 0.6.95 Flyte Flyteadmin 0.6.96 Flyte Flyteadmin 0.6.97 Flyte Flyteadmin 0.6.98 Flyte Flyteadmin 0.6.99 Flyte Flyteadmin 0.6.100 Flyte Flyteadmin 0.6.101 Flyte Flyteadmin 0.6.102 Flyte Flyteadmin 0.6.103 Flyte Flyteadmin 0.6.104 Flyte Flyteadmin 0.6.105 Flyte Flyteadmin 0.6.106 Flyte Flyteadmin 0.6.107 Flyte Flyteadmin 0.6.108 Flyte Flyteadmin 0.6.109 Flyte Flyteadmin 0.6.110 Flyte Flyteadmin 0.6.111 Flyte Flyteadmin 0.6.112 Flyte Flyteadmin 0.6.113 Flyte Flyteadmin 0.6.114 Flyte Flyteadmin 0.6.115 Flyte Flyteadmin 0.6.116 Flyte Flyteadmin 0.6.117 Flyte Flyteadmin 0.6.118 Flyte Flyteadmin 0.6.119 Flyte Flyteadmin 0.6.120 Flyte Flyteadmin 0.6.121 Flyte Flyteadmin 0.6.122 Flyte Flyteadmin 0.6.123 Flyte Flyteadmin 0.6.124 Flyte Flyteadmin 0.6.125 Flyte Flyteadmin 0.6.126 Flyte Flyteadmin 0.6.127 Flyte Flyteadmin 0.6.128 Flyte Flyteadmin 0.6.129 Flyte Flyteadmin 0.6.130 Flyte Flyteadmin 0.6.131 Flyte Flyteadmin 0.6.132 Flyte Flyteadmin 0.6.133 Flyte Flyteadmin 0.6.134 Flyte Flyteadmin 0.6.135 Flyte Flyteadmin 0.6.136 Flyte Flyteadmin 0.6.137 Flyte Flyteadmin 0.6.138 Flyte Flyteadmin 0.6.139 Flyte Flyteadmin 0.6.140 Flyte Flyteadmin 0.6.141 Flyte Flyteadmin 0.6.142 Flyte Flyteadmin 0.6.143 Flyte Flyteadmin 0.6.144 Flyte Flyteadmin 0.6.145 Flyte Flyteadmin 0.6.146 Flyte Flyteadmin 0.6.147 Flyte Flyteadmin 0.6.148 Flyte Flyteadmin 0.6.149 Flyte Flyteadmin 0.6.150 Flyte Flyteadmin 1.0.0 Flyte Flyteadmin 1.0.1 Flyte Flyteadmin 1.1.0 Flyte Flyteadmin 1.1.1 Flyte Flyteadmin 1.1.2 Flyte Flyteadmin 1.1.3 Flyte Flyteadmin 1.1.4 Flyte Flyteadmin 1.1.5 Flyte Flyteadmin 1.1.6 Flyte Flyteadmin 1.1.7 Flyte Flyteadmin 1.1.8 Flyte Flyteadmin 1.1.9 Flyte Flyteadmin 1.1.10 Flyte Flyteadmin 1.1.11 Flyte Flyteadmin 1.1.12 Flyte Flyteadmin 1.1.13 Flyte Flyteadmin 1.1.14 Flyte Flyteadmin 1.1.15 Flyte Flyteadmin 1.1.16 Flyte Flyteadmin 1.1.17 Flyte Flyteadmin 1.1.18 Flyte Flyteadmin 1.1.19 Flyte Flyteadmin 1.1.20 Flyte Flyteadmin 1.1.21 Flyte Flyteadmin 1.1.22 Flyte Flyteadmin 1.1.23 Flyte Flyteadmin 1.1.24 Flyte Flyteadmin 1.1.25 Flyte Flyteadmin 1.1.26 Flyte Flyteadmin 1.1.27 Flyte Flyteadmin 1.1.28 Flyte Flyteadmin 1.1.29 Flyte Flyteadmin 1.1.30	280

Common Weakness Enumeration (CWE)

CWE-613 - Insufficient Session Expiration

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References