CVE-2024-41264

gistfile1.txt

 [Suggested description]
 An issue was discovered in casdoor v1.636.0. The usage of the
 ssh.InsecureIgnoreHostKey() disables host key verification, possibly
 allowing attackers to obtain sensitive information via a
 man-in-the-middle attack.

In casdoor/casdoor/object/viaSSHDialer.go, 
the InsecureIgnoreHostKey() method is used when establishing SSH 
connections. This method disables host key checking, effectively 
ignoring any potential discrepancies between the expected and 
actual host keys. This practice can lead to similar security 
risks as with TLS verification, such as enabling MITM attacks 
by allowing attackers to impersonate the intended server.

 ------------------------------------------

 [VulnerabilityType Other]
 CWE-297: Improper Validation of Certificate with Host Mismatch

 ------------------------------------------

 [Vendor of Product]
 https://github.com/casdoor/casdoor

 ------------------------------------------

 [Affected Product Code Base]
 casdoor - <=1.636.0

 ------------------------------------------

 [Affected Component]
 SSHDialer

 ------------------------------------------

 [Attack Type]
 Remote

 ------------------------------------------

 [Impact Information Disclosure]
 true

 ------------------------------------------

 [Attack Vectors]
 use ssh connect mysql or postgres or mssql

 ------------------------------------------

 [Discoverer]
 Yuexi Zhang

 ------------------------------------------

 [Reference]
 http://casdoor.com
 https://github.com/casdoor/casdoor