Description

It's possible to access the APISIX's Admin API by using the default access token. Therefore, an attacker can interact with the server as an administrator which leads to takeover of the server.

Remediation

Change the default access token and restrict access to API

References

CVE-2020-13945: Apache APISIX's Admin API default access token vulnerability

CVE-2022-24112: Apache APISIX: apisix/batch-requests plugin allows overwriting the X-REAL-IP header

Related Vulnerabilities

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-10705)

phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15072)

XWiki Incorrect Authorization Vulnerability (CVE-2021-32620)

ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2005-3996)

Internet Information Services Other Vulnerability (CVE-2003-0224)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A

Tags

Default Credentials Insecure Admin Access Known Vulnerabilities CWE-259 CVE-2020-13945 CVE-2022-24112