Bk Cmdb
Monthly
Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 lets any holder of a valid account read host records belonging to other businesses by posting crafted search conditions to /api/v3/hosts/search/asstdetail, because that route is mapped to SkipAction and SearchHostWithAsstDetail never calls AuthorizeSearchHost. The result is read-only cross-tenant disclosure of host attributes and topology associations; integrity and availability are unaffected (assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, CWE-862). The exposure is bounded by the need for existing credentials and matters mainly in multi-business deployments where business-level isolation is the control being relied upon; no public exploit code has been confirmed at time of analysis, and no KEV or EPSS signal accompanies this record.
Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 lets any holder of a valid account read host records belonging to other businesses by posting crafted search conditions to /api/v3/hosts/search/asstdetail, because that route is mapped to SkipAction and SearchHostWithAsstDetail never calls AuthorizeSearchHost. The result is read-only cross-tenant disclosure of host attributes and topology associations; integrity and availability are unaffected (assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, CWE-862). The exposure is bounded by the need for existing credentials and matters mainly in multi-business deployments where business-level isolation is the control being relied upon; no public exploit code has been confirmed at time of analysis, and no KEV or EPSS signal accompanies this record.