Vulnerabilities > CVE-2023-51663 - Authentication Bypass by Alternate Name vulnerability in Hail

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

hail

CWE-289

NVD

Published: 2023-12-29

Updated: 2024-01-05

Summary

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect (OIDC) email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change their email address, they could create accounts and use resources in clusters that they should not have access to. For example, a user could create a Microsoft or Google account and then change their email to `[email protected]`. This account can then be used to create a Hail Batch account in Hail Batch clusters whose organization domain is `example.org`. The attacker is not able to access private data or impersonate another user, but they would have the ability to run jobs if Hail Batch billing projects are enabled and create Azure Tenants if they have Azure Active Directory Administrator access.

Vulnerable Configurations

Part	Description	Count
Application	Hail Hail Hail 0.2 Hail Hail 0.2.1 Hail Hail 0.2.2 Hail Hail 0.2.3 Hail Hail 0.2.4 Hail Hail 0.2.5 Hail Hail 0.2.6 Hail Hail 0.2.7 Hail Hail 0.2.8 Hail Hail 0.2.9 Hail Hail 0.2.10 Hail Hail 0.2.11 Hail Hail 0.2.12 Hail Hail 0.2.13 Hail Hail 0.2.14 Hail Hail 0.2.15 Hail Hail 0.2.16 Hail Hail 0.2.17 Hail Hail 0.2.18 Hail Hail 0.2.19 Hail Hail 0.2.20 Hail Hail 0.2.21 Hail Hail 0.2.22 Hail Hail 0.2.23 Hail Hail 0.2.24 Hail Hail 0.2.25 Hail Hail 0.2.26 Hail Hail 0.2.27 Hail Hail 0.2.28 Hail Hail 0.2.29 Hail Hail 0.2.30 Hail Hail 0.2.31 Hail Hail 0.2.32 Hail Hail 0.2.33 Hail Hail 0.2.34 Hail Hail 0.2.35 Hail Hail 0.2.36 Hail Hail 0.2.37 Hail Hail 0.2.38 Hail Hail 0.2.39 Hail Hail 0.2.40 Hail Hail 0.2.41 Hail Hail 0.2.42 Hail Hail 0.2.43 Hail Hail 0.2.44 Hail Hail 0.2.45 Hail Hail 0.2.46 Hail Hail 0.2.47 Hail Hail 0.2.48 Hail Hail 0.2.49 Hail Hail 0.2.50 Hail Hail 0.2.51 Hail Hail 0.2.52 Hail Hail 0.2.53 Hail Hail 0.2.54 Hail Hail 0.2.55 Hail Hail 0.2.56 Hail Hail 0.2.57 Hail Hail 0.2.58 Hail Hail 0.2.59 Hail Hail 0.2.60 Hail Hail 0.2.61 Hail Hail 0.2.62 Hail Hail 0.2.63 Hail Hail 0.2.64 Hail Hail 0.2.65 Hail Hail 0.2.66 Hail Hail 0.2.67 Hail Hail 0.2.68 Hail Hail 0.2.69 Hail Hail 0.2.70 Hail Hail 0.2.71 Hail Hail 0.2.72 Hail Hail 0.2.73 Hail Hail 0.2.74 Hail Hail 0.2.75 Hail Hail 0.2.76 Hail Hail 0.2.77 Hail Hail 0.2.78 Hail Hail 0.2.79 Hail Hail 0.2.80 Hail Hail 0.2.81 Hail Hail 0.2.82 Hail Hail 0.2.83 Hail Hail 0.2.84 Hail Hail 0.2.85 Hail Hail 0.2.86 Hail Hail 0.2.87 Hail Hail 0.2.88 Hail Hail 0.2.89 Hail Hail 0.2.90 Hail Hail 0.2.91 Hail Hail 0.2.92 Hail Hail 0.2.93 Hail Hail 0.2.94 Hail Hail 0.2.95 Hail Hail 0.2.96 Hail Hail 0.2.97 Hail Hail 0.2.98 Hail Hail 0.2.99 Hail Hail 0.2.100 Hail Hail 0.2.101 Hail Hail 0.2.102 Hail Hail 0.2.103 Hail Hail 0.2.104 Hail Hail 0.2.105 Hail Hail 0.2.106 Hail Hail 0.2.107 Hail Hail 0.2.108 Hail Hail 0.2.109 Hail Hail 0.2.110 Hail Hail 0.2.111 Hail Hail 0.2.112 Hail Hail 0.2.113 Hail Hail 0.2.114 Hail Hail 0.2.115 Hail Hail 0.2.116 Hail Hail 0.2.117 Hail Hail 0.2.118 Hail Hail 0.2.119 Hail Hail 0.2.120 Hail Hail 0.2.121 Hail Hail 0.2.122 Hail Hail 0.2.123 Hail Hail 0.2.124 Hail Hail 0.2.125 Hail Hail 0.2.126	127

Common Weakness Enumeration (CWE)

CWE-289 - Authentication Bypass by Alternate Name

References

https://github.com/hail-is/hail/security/advisories/GHSA-487p-qx68-5vjw