Description
Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to retrieve the installation-specific BrokerGateway key even while pairing mode is disabled. Attackers can use the retrieved key to obtain the unrestricted DataMinerUser.creds NATS credential and gain trusted message-bus access via TCP port 4222 without any prior DataMiner credentials. Fixed in DataMiner 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Skyline Communications | DataMiner | 10.6.9 – < 10.6.9 CU1, 10.6.0 – < 10.6.0 CU7, 10.5.0 – < 10.5.0 CU19, 10.4.0 – < 10.4.0 CU22 | 10.6.9 CU1 |
References
- Vendor Advisory patch vendor-advisory
- VulnCheck Advisory: Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass third-party-advisory