{
  "GSD": {
    "alias": "CVE-2022-31289",
    "description": "GSD UPDATE: There doesn\u0027t appear to be a vulnerability, the Sonatype Nexus Repository Manager OSS is a single page web app, so when passed a \"200\" response the page displays that login was successful when it fact it was not. A CVE was erroneously assigned to the original security researchers report. \n\n https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. \u00b6\u00b6 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.",
    "id": "GSD-2022-31289",
    "references": [
      {
        "type": "WEB",
        "url": "https://blog.sonatype.com/nexus-repo-issue-neither-bug-nor-vulnerability"
      },
      {
        "type": "TWITTER",
        "url": "https://twitter.com/brian_fox/status/1537468660377440270"
      }
    ],
    "summary": "GSD UPDATE: There doesn\u0027t appear to be a vulnerability, the Sonatype Nexus Repository Manager OSS is a single page web app, so when passed a \"200\" response the page displays that login was successful when it fact it was not. A CVE was erroneously assigned to the original security researchers report."
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-31289"
      ],
      "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
      "id": "GSD-2022-31289",
      "modified": "2023-12-13T01:19:17.728055Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2022-31289",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": []
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-31289"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "** DISPUTED ** https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access. NOTE: third parties claim that the server application has not actually authenticated the request and no administrative actions are permitted which would not make this issue a vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": []
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb",
              "refsource": "MISC",
              "tags": [],
              "url": "https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb"
            },
            {
              "name": "https://www.acunetix.com/vulnerabilities/web/tag/authentication-bypass/",
              "refsource": "MISC",
              "tags": [],
              "url": "https://www.acunetix.com/vulnerabilities/web/tag/authentication-bypass/"
            }
          ]
        }
      },
      "impact": {},
      "lastModifiedDate": "2022-06-23T17:15Z",
      "publishedDate": "2022-06-14T17:15Z"
    }
  }
}