Lucene search
+L

CVE-2021-23365 Authentication Bypass

🗓️ 26 Apr 2021 10:05:33Reported by snykType 
cvelist
 cvelist
🔗 www.cve.org👁 36 Views

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 is vulnerable to Authentication Bypass via Go XML parser, leading to SAML authentication bypass due to lack of XML integrity guarantee

Related
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2021-23365
26 Apr 202110:00
–attackerkb
cnnvd
CNNVD
tyk-identity-broker 授权问题漏洞
26 Apr 202100:00
–cnnvd
cve
CVE
CVE-2021-23365
26 Apr 202110:05
–cve
euvd
EUVD
EUVD-2021-1267
7 Oct 202500:30
–euvd
github
Github Security Blog
Authentication Bypass in tyk-identity-broker
23 Jun 202117:23
–github
mend
Mend
CVE-2021-23365
26 Apr 202110:05
–mend
nvd
NVD
CVE-2021-23365
26 Apr 202110:15
–nvd
osv
OSV
GHSA-599H-8WPJ-75XJ Authentication Bypass in tyk-identity-broker
23 Jun 202117:23
–osv
osv
OSV
GO-2022-0906 Authentication Bypass in tyk-identity-broker in github.com/TykTechnologies/tyk-identity-broker
21 Aug 202415:29
–osv
prion
Prion
Authentication flaw
26 Apr 202110:15
–prion
Rows per page
[
  {
    "product": "github.com/TykTechnologies/tyk-identity-broker",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "1.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Apr 2021 10:05Current
9.6Critical risk
Vulners AI Score9.6
CVSS 3.14.8
EPSS0.01011
36