Lucene search
GitHub Advisory DatabaseGHSA-QF76-PR7X-H7R4HistoryAug 02, 2021 - 4:38 p.m.
Incorrect Access Control in Nacos
2021-08-0216:38:01
CWE-200
GitHub Advisory Database
github.com
37
0.001 Low
EPSS
Percentile
47.1%
Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.alibaba.nacos:nacos-common | lt | 1.2.0 |
Related
cve
cve
CVE-2020-19676
2020-09-30 18:15:00
osv
osv
Incorrect Access Control in Nacos
2021-08-02 16:38:01
CVE-2020-19676
2020-09-30 18:15:23
veracode
veracode
Insecure Access Control
2021-08-03 13:32:03
gitlab
gitlab
Information Exposure
2020-09-30 00:00:00
Incorrect Access Control in Nacos
2021-08-02 00:00:00
prion
prion
Information disclosure
2020-09-30 18:15:00
cvelist
cvelist
CVE-2020-19676
2020-09-30 17:52:39