Description
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
Related
{"id": "CVE-2023-28609", "vendorId": null, "type": "cve", "bulletinFamily": "NVD", "title": "CVE-2023-28609", "description": "api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.", "published": "2023-03-18T21:15:00", "modified": "2023-03-20T02:46:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28609", "reporter": "cve@mitre.org", "references": ["https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1", "https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89"], "cvelist": ["CVE-2023-28609"], "immutableFields": [], "lastseen": "2023-03-20T05:38:23", "viewCount": 7, "enchantments": {"score": {"value": 2.4, "vector": "NONE"}, "epss": [{"cve": "CVE-2023-28609", "epss": "0.000430000", "percentile": "0.069220000", "modified": "2023-03-20"}], "vulnersScore": 2.4}, "_state": {"score": 1679290847, "dependencies": 1679290808, "epss": 1679362613}, "_internal": {"score_hash": "6908b3099c260fa98370d9a6492253c3"}, "cna_cvss": {"cna": null, "cvss": {}}, "cpe": [], "cpe23": [], "cwe": [], "affectedSoftware": [], "affectedConfiguration": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": []}, "extraReferences": [{"url": "https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1", "name": "https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1", "refsource": "MISC", "tags": []}, {"url": "https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89", "name": "https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89", "refsource": "MISC", "tags": []}], "product_info": []}
{"osv": [{"lastseen": "2023-03-20T21:23:59", "description": "api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.", "cvss3": {}, "published": "2023-03-18T21:30:23", "type": "osv", "title": "Ansible Semaphore mishandles authentication", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2023-28609"], "modified": "2023-03-20T21:14:43", "id": "OSV:GHSA-PMHG-CMJC-3875", "href": "https://osv.dev/vulnerability/GHSA-pmhg-cmjc-3875", "cvss": {"score": 0.0, "vector": "NONE"}}], "github": [{"lastseen": "2023-03-20T23:09:07", "description": "api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.", "cvss3": {}, "published": "2023-03-18T21:30:23", "type": "github", "title": "Ansible Semaphore mishandles authentication", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2023-28609"], "modified": "2023-03-20T21:14:45", "id": "GHSA-PMHG-CMJC-3875", "href": "https://github.com/advisories/GHSA-pmhg-cmjc-3875", "cvss": {"score": 0.0, "vector": "NONE"}}]}