CVE-2021-27099 is a medium-severity vulnerability affecting SPIRE versions prior to 0.8.5, 0.9.4, 0.10.2, 0.11.3, and 0.12.1. It allows an authenticated, remote attacker to potentially issue arbitrary SPIFFE IDs within the same trust domain due to improper path normalization in the "aws_iid" Node Attestor, specifically when an attacker controls an EC2 tag value used in agent ID templating. The vulnerability has a CVSS score of 6.8 (Medium), indicating high impact on confidentiality and integrity with high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.8.5CPE matchmatch criteria | cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:* | ||
>= 0.9.0, < 0.9.4CPE matchmatch criteria | cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:* | ||
>= 0.10.0, < 0.10.2CPE matchmatch criteria | cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:* | ||
>= 0.11.0, < 0.11.3CPE matchmatch criteria | cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:* | ||
>= 0.12.0, < 0.12.1CPE matchmatch criteria | cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.