Auth bypass in Coturn Project
CVE-2018-4059
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.019 (78.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 79th percentile — 78.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.019 · newest: 0.019 · change: 0.000
Affected products
- Coturn Project
- Talos Coturn — versions coTURN 4.5.0.5
Weakness classification (CWE)
References
- talosintelligence.com/vulnerability_reports/TALOS-2018-0733 (Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2018-4059?
- CVE-2018-4059 is a critical-severity vulnerability in Coturn Project, classified under Missing Authorization. CVSS score: 9.8/10. Published 2019-03-21.
- How severe is CVE-2018-4059?
- Critical severity. CVSS v3 base score is 9.8 out of 10.