Insecure proxy configuration in Mozilla Hubs Cloud Reticulum

1) Insecure configuration

EUVDB-ID: #VU52976

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-29954

CWE-ID: CWE-16 - Configuration

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to insecure proxy configuration built into our Reticulum software package, which allowed access to internal URLs, including the metadata service, which could allow access to credentials specific to a Hubs Cloud Instance. A remote non-authenticated attacker can obtain sensitive information and use it to compromise the Hubs Cloud Instance.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Reticulum: 1.0.1/20200817225751 - 1.0.20201012230301

CPE2.3

• cpe:2.3:a:mozilla:reticulum:1.0.1/20200817225751:*:*:*:*:hubs_cloud:*:*
• cpe:2.3:a:mozilla:reticulum:1.0.1/20200911183406:*:*:*:*:hubs_cloud:*:*
• cpe:2.3:a:mozilla:reticulum:1.0.1/20210115134515:*:*:*:*:hubs_cloud:*:*

External links

https://www.mozilla.org/en-US/security/advisories/mfsa2021-21/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.