Stroom Authentication Bypass Vulnerability with AWS ALB Integration

A vulnerability allowing authentication bypass has been identified in Stroom versions 7.2-beta.53 prior to 7.4.4, and 7.5-beta.1. This issue arises when the application is configured to use AWS Application Load Balancer (ALB) Authentication integration, but is accessible outside of the ALB. The vulnerability could also enable server-side request forgery (SSRF) attacks, potentially leading to code execution or privilege escalation via the AWS metadata URL.

Impact

Exploitation of this vulnerability could bypass authentication and authorization mechanisms, allowing unauthorized access to the Stroom application. Additionally, the identified SSRF could be exploited to execute code or escalate privileges by accessing the AWS metadata service.

Remediation

Users are advised to upgrade to Stroom versions 7.2.24, 7.3-beta.22, 7.4.4, or 7.5-beta.2.