NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects

🗓️ 11 Jul 2024 21:12:31Reported by GitHub Advisory DatabaseType

NATS Server and Streaming Server fail to enforce negative user permissions, may allow denied subject

Reporter	Title	Published	Views	Family All 12
RedhatCVE	CVE-2022-29946	12 Jul 202404:03	–	redhatcve
OSV	NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects	11 Jul 202421:31	–	osv
OSV	CVE-2022-29946	11 Jul 202421:15	–	osv
OSV	NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server	12 Jul 202416:45	–	osv
OSV	UBUNTU-CVE-2022-29946	11 Jul 202421:15	–	osv
Vulnrichment	CVE-2022-29946	11 Jul 202400:00	–	vulnrichment
Cvelist	CVE-2022-29946	11 Jul 202400:00	–	cvelist
Veracode	Authentication Bypass	12 Jul 202406:59	–	veracode
UbuntuCve	CVE-2022-29946	11 Jul 202400:00	–	ubuntucve
CVE	CVE-2022-29946	11 Jul 202421:15	–	cve

Vulners

Node

nats-io nats-streaming-serverRange<0.24.6

nats-io nats-serverRange<2.8.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-29946
github	www.github.com/nats-io/advisories/blob/main/CVE/CVE-2022-29946.txt
github	www.github.com/advisories/GHSA-2h2x-8hh2-mfq8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Jul 2024 21:31Current

6.9Medium risk

Vulners AI Score6.9

CVSS36.3

SSVC

CWE-863