Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88817
HistorySep 28, 2022 - 12:00 a.m.

Bifrost Licensing Issue Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

26.8%

Bifrost is a middleware package that synchronizes MySQL (MariaDB) binary log data to other types of databases.Bifrost 1.8.6-release and earlier versions are vulnerable to authorization issues, which stem from its vulnerability to authentication bypass when using HTTP basic authentication, which can be exploited by an attacker to cause only A member of a group with read access can gain access to write requests.

0.001 Low

EPSS

Percentile

26.8%