Lucene search
China National Vulnerability DatabaseCNVD-2021-58576HistoryMar 18, 2021 - 12:00 a.m.
Envoy licensing issue vulnerability
2021-03-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
envoy
proxy server
vulnerability
jwt
authentication
bypass
EPSS
0.001
Percentile
48.4%
Envoy is an open source distributed proxy server. Envoy is vulnerable to an authorization issue, which could be exploited by an attacker to bypass authentication by providing a JWT token to an issuer that is not in the provider list.
Related
nvd
nvd
CVE-2021-21378
2021-03-11 03:15:12
redhatcve
redhatcve
CVE-2021-21378
2021-03-09 23:54:58
cvelist
cvelist
CVE-2021-21378 JWT authentication bypass with unknown issuer token
2021-03-11 02:40:14
osv
osv
BIT-envoy-2021-21378
2024-03-06 10:59:25
CVE-2021-21378
2021-03-11 03:15:12
prion
prion
Authentication flaw
2021-03-11 03:15:00
cve
cve
CVE-2021-21378
2021-03-11 03:15:12