Vulnerabilities > CVE-2022-39273 - Unspecified vulnerability in Flyte Flyteadmin

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

flyte

NVD

Published: 2022-10-06

Updated: 2024-11-21

Summary

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the default configuration for Flyte Admin allows access for Flyte Propeller even after turning on authentication via a hardcoded hashed password. This password is also set on the default Flyte Propeller configmap in the various Flyte Helm charts. Users who enable auth but do not override this setting in Flyte Admin’s configuration may unbeknownst to them be allowing public traffic in by way of this default password with attackers effectively impersonating propeller. This only applies to users who have not specified the ExternalAuthorizationServer setting. Usage of an external auth server automatically turns off this default configuration and are not susceptible to this vulnerability. This issue has been addressed in version 1.1.44. Users should manually set the staticClients in the selfAuthServer section of their configuration if they intend to rely on Admin’s internal auth server. Again, users who use an external auth server are automatically protected from this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Flyte Flyte Flyteadmin - Flyte Flyteadmin 0.1.0 Flyte Flyteadmin 0.1.1 Flyte Flyteadmin 0.1.3 Flyte Flyteadmin 0.1.4 Flyte Flyteadmin 0.1.5 Flyte Flyteadmin 0.1.6 Flyte Flyteadmin 0.1.7 Flyte Flyteadmin 0.2.0 Flyte Flyteadmin 0.2.1 Flyte Flyteadmin 0.2.2 Flyte Flyteadmin 0.2.3 Flyte Flyteadmin 0.2.4 Flyte Flyteadmin 0.2.5 Flyte Flyteadmin 0.2.6 Flyte Flyteadmin 0.2.7 Flyte Flyteadmin 0.2.8 Flyte Flyteadmin 0.2.9 Flyte Flyteadmin 0.2.10 Flyte Flyteadmin 0.2.11 Flyte Flyteadmin 0.2.12 Flyte Flyteadmin 0.3.0 Flyte Flyteadmin 0.3.1 Flyte Flyteadmin 0.3.2 Flyte Flyteadmin 0.3.3 Flyte Flyteadmin 0.3.4 Flyte Flyteadmin 0.3.5 Flyte Flyteadmin 0.3.6 Flyte Flyteadmin 0.3.7 Flyte Flyteadmin 0.3.8 Flyte Flyteadmin 0.3.9 Flyte Flyteadmin 0.3.10 Flyte Flyteadmin 0.3.11 Flyte Flyteadmin 0.3.12 Flyte Flyteadmin 0.3.13 Flyte Flyteadmin 0.3.14 Flyte Flyteadmin 0.3.15 Flyte Flyteadmin 0.3.16 Flyte Flyteadmin 0.3.17 Flyte Flyteadmin 0.3.18 Flyte Flyteadmin 0.3.19 Flyte Flyteadmin 0.3.20 Flyte Flyteadmin 0.3.21 Flyte Flyteadmin 0.3.22 Flyte Flyteadmin 0.3.23 Flyte Flyteadmin 0.3.24 Flyte Flyteadmin 0.3.25 Flyte Flyteadmin 0.3.26 Flyte Flyteadmin 0.3.27 Flyte Flyteadmin 0.3.28 Flyte Flyteadmin 0.3.29 Flyte Flyteadmin 0.3.30 Flyte Flyteadmin 0.3.31 Flyte Flyteadmin 0.3.32 Flyte Flyteadmin 0.3.33 Flyte Flyteadmin 0.3.34 Flyte Flyteadmin 0.3.35 Flyte Flyteadmin 0.3.36 Flyte Flyteadmin 0.3.37 Flyte Flyteadmin 0.3.38 Flyte Flyteadmin 0.3.39 Flyte Flyteadmin 0.3.40 Flyte Flyteadmin 0.3.41 Flyte Flyteadmin 0.3.42 Flyte Flyteadmin 0.3.43 Flyte Flyteadmin 0.4.0 Flyte Flyteadmin 0.4.1 Flyte Flyteadmin 0.4.2 Flyte Flyteadmin 0.4.3 Flyte Flyteadmin 0.4.4 Flyte Flyteadmin 0.4.5 Flyte Flyteadmin 0.4.6 Flyte Flyteadmin 0.4.7 Flyte Flyteadmin 0.4.8 Flyte Flyteadmin 0.4.9 Flyte Flyteadmin 0.4.10 Flyte Flyteadmin 0.4.11 Flyte Flyteadmin 0.4.12 Flyte Flyteadmin 0.4.13 Flyte Flyteadmin 0.4.14 Flyte Flyteadmin 0.4.15 Flyte Flyteadmin 0.4.16 Flyte Flyteadmin 0.4.17 Flyte Flyteadmin 0.5.0 Flyte Flyteadmin 0.5.1 Flyte Flyteadmin 0.5.2 Flyte Flyteadmin 0.5.3 Flyte Flyteadmin 0.5.4 Flyte Flyteadmin 0.5.5 Flyte Flyteadmin 0.5.6 Flyte Flyteadmin 0.5.7 Flyte Flyteadmin 0.5.8 Flyte Flyteadmin 0.5.9 Flyte Flyteadmin 0.5.10 Flyte Flyteadmin 0.5.11 Flyte Flyteadmin 0.5.12 Flyte Flyteadmin 0.6.0 Flyte Flyteadmin 0.6.1 Flyte Flyteadmin 0.6.2 Flyte Flyteadmin 0.6.3 Flyte Flyteadmin 0.6.4 Flyte Flyteadmin 0.6.5 Flyte Flyteadmin 0.6.6 Flyte Flyteadmin 0.6.7 Flyte Flyteadmin 0.6.8 Flyte Flyteadmin 0.6.9 Flyte Flyteadmin 0.6.10 Flyte Flyteadmin 0.6.11 Flyte Flyteadmin 0.6.12 Flyte Flyteadmin 0.6.13 Flyte Flyteadmin 0.6.14 Flyte Flyteadmin 0.6.15 Flyte Flyteadmin 0.6.16 Flyte Flyteadmin 0.6.17 Flyte Flyteadmin 0.6.18 Flyte Flyteadmin 0.6.19 Flyte Flyteadmin 0.6.20 Flyte Flyteadmin 0.6.21 Flyte Flyteadmin 0.6.22 Flyte Flyteadmin 0.6.23 Flyte Flyteadmin 0.6.24 Flyte Flyteadmin 0.6.25 Flyte Flyteadmin 0.6.26 Flyte Flyteadmin 0.6.27 Flyte Flyteadmin 0.6.28 Flyte Flyteadmin 0.6.29 Flyte Flyteadmin 0.6.30 Flyte Flyteadmin 0.6.31 Flyte Flyteadmin 0.6.32 Flyte Flyteadmin 0.6.33 Flyte Flyteadmin 0.6.34 Flyte Flyteadmin 0.6.35 Flyte Flyteadmin 0.6.36 Flyte Flyteadmin 0.6.37 Flyte Flyteadmin 0.6.38 Flyte Flyteadmin 0.6.39 Flyte Flyteadmin 0.6.40 Flyte Flyteadmin 0.6.41 Flyte Flyteadmin 0.6.42 Flyte Flyteadmin 0.6.43 Flyte Flyteadmin 0.6.44 Flyte Flyteadmin 0.6.45 Flyte Flyteadmin 0.6.46 Flyte Flyteadmin 0.6.47 Flyte Flyteadmin 0.6.48 Flyte Flyteadmin 0.6.49 Flyte Flyteadmin 0.6.50 Flyte Flyteadmin 0.6.51 Flyte Flyteadmin 0.6.52 Flyte Flyteadmin 0.6.53 Flyte Flyteadmin 0.6.54 Flyte Flyteadmin 0.6.55 Flyte Flyteadmin 0.6.56 Flyte Flyteadmin 0.6.57 Flyte Flyteadmin 0.6.58 Flyte Flyteadmin 0.6.59 Flyte Flyteadmin 0.6.60 Flyte Flyteadmin 0.6.61 Flyte Flyteadmin 0.6.62 Flyte Flyteadmin 0.6.63 Flyte Flyteadmin 0.6.64 Flyte Flyteadmin 0.6.65 Flyte Flyteadmin 0.6.66 Flyte Flyteadmin 0.6.67 Flyte Flyteadmin 0.6.68 Flyte Flyteadmin 0.6.69 Flyte Flyteadmin 0.6.70 Flyte Flyteadmin 0.6.71 Flyte Flyteadmin 0.6.72 Flyte Flyteadmin 0.6.73 Flyte Flyteadmin 0.6.74 Flyte Flyteadmin 0.6.75 Flyte Flyteadmin 0.6.76 Flyte Flyteadmin 0.6.77 Flyte Flyteadmin 0.6.78 Flyte Flyteadmin 0.6.79 Flyte Flyteadmin 0.6.80 Flyte Flyteadmin 0.6.81 Flyte Flyteadmin 0.6.82 Flyte Flyteadmin 0.6.83 Flyte Flyteadmin 0.6.84 Flyte Flyteadmin 0.6.85 Flyte Flyteadmin 0.6.86 Flyte Flyteadmin 0.6.87 Flyte Flyteadmin 0.6.88 Flyte Flyteadmin 0.6.89 Flyte Flyteadmin 0.6.90 Flyte Flyteadmin 0.6.91 Flyte Flyteadmin 0.6.92 Flyte Flyteadmin 0.6.93 Flyte Flyteadmin 0.6.94 Flyte Flyteadmin 0.6.95 Flyte Flyteadmin 0.6.96 Flyte Flyteadmin 0.6.97 Flyte Flyteadmin 0.6.98 Flyte Flyteadmin 0.6.99 Flyte Flyteadmin 0.6.100 Flyte Flyteadmin 0.6.101 Flyte Flyteadmin 0.6.102 Flyte Flyteadmin 0.6.103 Flyte Flyteadmin 0.6.104 Flyte Flyteadmin 0.6.105 Flyte Flyteadmin 0.6.106 Flyte Flyteadmin 0.6.107 Flyte Flyteadmin 0.6.108 Flyte Flyteadmin 0.6.109 Flyte Flyteadmin 0.6.110 Flyte Flyteadmin 0.6.111 Flyte Flyteadmin 0.6.112 Flyte Flyteadmin 0.6.113 Flyte Flyteadmin 0.6.114 Flyte Flyteadmin 0.6.115 Flyte Flyteadmin 0.6.116 Flyte Flyteadmin 0.6.117 Flyte Flyteadmin 0.6.118 Flyte Flyteadmin 0.6.119 Flyte Flyteadmin 0.6.120 Flyte Flyteadmin 0.6.121 Flyte Flyteadmin 0.6.122 Flyte Flyteadmin 0.6.123 Flyte Flyteadmin 0.6.124 Flyte Flyteadmin 0.6.125 Flyte Flyteadmin 0.6.126 Flyte Flyteadmin 0.6.127 Flyte Flyteadmin 0.6.128 Flyte Flyteadmin 0.6.129 Flyte Flyteadmin 0.6.130 Flyte Flyteadmin 0.6.131 Flyte Flyteadmin 0.6.132 Flyte Flyteadmin 0.6.133 Flyte Flyteadmin 0.6.134 Flyte Flyteadmin 0.6.135 Flyte Flyteadmin 0.6.136 Flyte Flyteadmin 0.6.137 Flyte Flyteadmin 0.6.138 Flyte Flyteadmin 0.6.139 Flyte Flyteadmin 0.6.140 Flyte Flyteadmin 0.6.141 Flyte Flyteadmin 0.6.142 Flyte Flyteadmin 0.6.143 Flyte Flyteadmin 0.6.144 Flyte Flyteadmin 0.6.145 Flyte Flyteadmin 0.6.146 Flyte Flyteadmin 0.6.147 Flyte Flyteadmin 0.6.148 Flyte Flyteadmin 0.6.149 Flyte Flyteadmin 0.6.150 Flyte Flyteadmin 1.0.0 Flyte Flyteadmin 1.0.1 Flyte Flyteadmin 1.1.0 Flyte Flyteadmin 1.1.1 Flyte Flyteadmin 1.1.2 Flyte Flyteadmin 1.1.3 Flyte Flyteadmin 1.1.4 Flyte Flyteadmin 1.1.5 Flyte Flyteadmin 1.1.6 Flyte Flyteadmin 1.1.7 Flyte Flyteadmin 1.1.8 Flyte Flyteadmin 1.1.9 Flyte Flyteadmin 1.1.10 Flyte Flyteadmin 1.1.11 Flyte Flyteadmin 1.1.12 Flyte Flyteadmin 1.1.13 Flyte Flyteadmin 1.1.14 Flyte Flyteadmin 1.1.15 Flyte Flyteadmin 1.1.16 Flyte Flyteadmin 1.1.17 Flyte Flyteadmin 1.1.18 Flyte Flyteadmin 1.1.19 Flyte Flyteadmin 1.1.20 Flyte Flyteadmin 1.1.21 Flyte Flyteadmin 1.1.22 Flyte Flyteadmin 1.1.23 Flyte Flyteadmin 1.1.24 Flyte Flyteadmin 1.1.25 Flyte Flyteadmin 1.1.26 Flyte Flyteadmin 1.1.27 Flyte Flyteadmin 1.1.28 Flyte Flyteadmin 1.1.29 Flyte Flyteadmin 1.1.30 Flyte Flyteadmin 1.1.31 Flyte Flyteadmin 1.1.32 Flyte Flyteadmin 1.1.33 Flyte Flyteadmin 1.1.34 Flyte Flyteadmin 1.1.35 Flyte Flyteadmin 1.1.36 Flyte Flyteadmin 1.1.37 Flyte Flyteadmin 1.1.38 Flyte Flyteadmin 1.1.39 Flyte Flyteadmin 1.1.40 Flyte Flyteadmin 1.1.41 Flyte Flyteadmin 1.1.42 Flyte Flyteadmin 1.1.43	293

Summary

Vulnerable Configurations

References