CVE-2023-28609

🗓️ 18 Mar 2023 21:11:15Reported by mitreType

Ansible Semaphore 2.8.89 mishandles authentication in api/auth.go

Reporter	Title	Published	Views	Family All 8
Prion	Authentication flaw	18 Mar 202321:15	–	prion
Github Security Blog	Ansible Semaphore mishandles authentication	18 Mar 202321:30	–	github
Cvelist	CVE-2023-28609	18 Mar 202300:00	–	cvelist
NVD	CVE-2023-28609	18 Mar 202321:15	–	nvd
Veracode	Authentication Bypass	23 Mar 202302:06	–	veracode
OSV	CVE-2023-28609	18 Mar 202321:15	–	osv
OSV	Ansible Semaphore mishandles authentication	18 Mar 202321:30	–	osv
Wallarm Lab	Changes in OWASP API Security Top-10 2023RC \| API Security Newsletter	6 Apr 202314:27	–	wallarmlab

Nvd

Node

ansible-semaphore ansible_semaphoreRange<2.8.89ansible

Source	Link
github	www.github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1
github	www.github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Mar 2023 21:15Current

9.3High risk

Vulners AI Score9.3

CVSS39.8

EPSS0.002

CWE-287