NVD Vulnerability Detail

CVE-2021-29431

Summary	Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.
Publication Date	April 16, 2021, 6:15 a.m.
Registration Date	April 16, 2021, 10:05 a.m.
Last Update	Nov. 21, 2024, 3:01 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:matrix:sydent::::::::					2.3.0

Related information, measures and tools

No	URL	タグ
1	https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a	Patch Third Party Advisory
2	https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a	Patch Third Party Advisory
3	https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3	Patch Third Party Advisory
4	https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3	Patch Third Party Advisory
5	https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a	Patch Third Party Advisory
6	https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a	Patch Third Party Advisory
7	https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f	Patch Third Party Advisory
8	https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f	Patch Third Party Advisory
9	https://github.com/matrix-org/sydent/releases/tag/v2.3.0	Release Notes Third Party Advisory
10	https://github.com/matrix-org/sydent/releases/tag/v2.3.0	Release Notes Third Party Advisory
11	https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4	Patch Third Party Advisory
12	https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4	Patch Third Party Advisory
13	https://pypi.org/project/matrix-sydent/	Product Third Party Advisory
14	https://pypi.org/project/matrix-sydent/	Product Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

Sydent における入力確認に関する脆弱性

Title	Sydent における入力確認に関する脆弱性
Summary	Sydent には、入力確認に関する脆弱性、およびサーバサイドのリクエストフォージェリの脆弱性が存在します。
Possible impacts	情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 24, 2021, midnight
Registration Date	Dec. 21, 2021, 5:02 p.m.
Last Update	Dec. 21, 2021, 5:02 p.m.

Affected System

Matrix

Sydent

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2021-29431	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29431
National Vulnerability Database (NVD)
2	CVE-2021-29431	https://nvd.nist.gov/vuln/detail/CVE-2021-29431

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html
2	CWE-918	https://cwe.mitre.org/data/definitions/918.html

ベンダー情報

No	Name	URL
GitHub
1	Add BlacklistingReactor	https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3
2	Allow IPv6 literals as Matrix server names.	https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a
3	Rework hostname validation to make port checking stricter.	https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f
4	SSRF due to missing validation of hostnames	https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4
5	Sydent 2.3.0 (2021-04-15)	https://github.com/matrix-org/sydent/releases/tag/v2.3.0
6	Validate hostname in more places	https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a
Python Package Index (PyPI)
7	matrix-sydent 2.5.1	https://pypi.org/project/matrix-sydent/

Change Log

No	Changed Details	Date of change
1	[2021年12月21日] 掲載	Dec. 21, 2021, 5:02 p.m.