Lucene search

K
cvelistMitreCVELIST:CVE-2022-24450
HistoryFeb 08, 2022 - 1:14 a.m.

CVE-2022-24450

2022-02-0801:14:48
mitre
www.cve.org
11
nats server
access control
cve-2022-24450
authentication
privileges
sandbox accounts feature

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

36.9%

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the “dynamically provisioned sandbox accounts” feature.

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

36.9%