🔙 목록으로 돌아가기

CVE-2020-11710: Kong Admin <=2.03 - Admin API Access

TitleKong Admin <=2.03 - Admin API Access
Authorpikpikcu
SeverityCritical
ImpactRemote attackers can gain unauthorized administrative access to the Kong Admin API.
RemediationUpgrade to Kong version 2.0.3 or later to fix the vulnerability and ensure proper authentication and access control mechanisms are in place.
CVSS Score9.8
EPSS Score0.94027
CVE IDCVE-2020-11710
Shodan Querycpe:"cpe:2.3:a:konghq:docker-kong"
Tags cve cve2020 kong konghq vuln

🔍 Vulnerability Description

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /admin/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11710.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-11710.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A