Lucene search
GitHub Advisory DatabaseGHSA-G95V-3PJ6-J433HistoryMay 14, 2024 - 6:30 p.m.
Ant Media Server does not properly authorize non-administrative API calls
2024-05-1418:30:52
CWE-863
GitHub Advisory Database
github.com
5
ant media server
authorization
api calls
Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users.
All versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch.
Affected configurations
Node
github_advisory_databaseio.antmedia\Matchant-media-server
| CPE | Name | Operator | Version |
|---|---|---|---|
| io.antmedia:ant-media-server | le | 2.9.0 |
Related
osv
osv
Ant Media Server does not properly authorize non-administrative API calls
2024-05-14 18:30:52
veracode
veracode
Inproper Authorization
2024-05-15 07:54:28
cve
cve
CVE-2024-3462
2024-05-14 15:41:14
nvd
nvd
CVE-2024-3462
2024-05-14 15:41:14
cvelist
cvelist
CVE-2024-3462 Authorization bypass in Ant Media Server
2024-05-13 08:19:13