Incomplete validation of sync encryption/decryption key access
Affected packages
proxmox-backup-server
Details
An attacker with Datastore.Modify or Datastore.Read on a datastore + namespace can configure sync jobs with arbitrary owners. The sync job's owner was used to validate whether a configured encryption/decryption key is allowed to be used by a sync job. This allowed leveraging high-level access on a datastore to use arbitrary configured encryption keys, instead of limiting access based on the configuring user/token.
This issue was found internally, and independently by Project Loupe.
Fixed in
- proxmox-backup-server >= 4.2.8-1
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.