CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a shared database connection can initiate certain server-side data exports even when an administrator has disabled exports. This can disclose database contents that the user is permitted to query but is not permitted to export. The issue does not grant additional database read privileges. It is fixed in 26.1.2 by consistently enforcing the global restriction for server-side exports.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…beaver/security/advisories/GHSA-9vv7-rf3x-8xr8 Diğer
• github.com/dbeaver/cloudbeaver/pull/4394 Diğer
• github.com/…ommit/58f51ee5f6fc1e93b14f4d96c1f75fbcc13407e9 Diğer

Kayıt geçmişi

1. 6 Kas 2026 23:06Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-63663CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access
• 5,3 CVE-2026-55449CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-projects sandbox
• 6,5 CVE-2026-85737Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
• 6,5 CVE-2026-634372FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration
• 6,5 CVE-2026-103984FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII
• 6,5 CVE-2026-62852FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key