Auth bypass in Pingcap Tidb
CVE-2022-31011
TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies include turning off Security Enhanced Mode (SEM), disabling local login for non-root accounts, and ensuring that the same IP cannot be logged in as root and normal user at the same time.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (22.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 22.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- Pingcap Tidb — versions 5.3.0, = 5.3.0
Weakness classification (CWE)
References
- github.com/pingcap/tidb/security/advisories/GHSA-4whx-7p29-mq22 (Third Party Advisory, Mitigation)
- github.com/pingcap/tidb/releases/tag/v5.3.1 (Third Party Advisory, Release Notes)
Frequently asked questions
- What is CVE-2022-31011?
- CVE-2022-31011 is a high-severity vulnerability in Pingcap Tidb, classified under Improper Authentication. CVSS score: 7.8/10. Published 2022-05-31.
- How severe is CVE-2022-31011?
- High severity. CVSS v3 base score is 7.8 out of 10.