Authentication granted to all firewalls instead of just one

🗓️ 21 Jun 2021 17:03:44Reported by GitHub Advisory DatabaseType

Authentication issue with multiple firewall

Reporter	Title	Published	Views	Family All 18
CNNVD	Sensio Labs Symfony 授权问题漏洞	17 Jun 202100:00	–	cnnvd
CNVD	Symfony Elevation of Privilege Vulnerability	22 Jun 202100:00	–	cnvd
CVE	CVE-2021-32693	17 Jun 202122:40	–	cve
Cvelist	CVE-2021-32693 Authentication granted with multiple firewalls	17 Jun 202122:40	–	cvelist
Debian CVE	CVE-2021-32693	17 Jun 202122:40	–	debiancve
EUVD	EUVD-2021-1396	7 Oct 202500:30	–	euvd
Friends Of PHP	CVE-2021-32693: Authentication granted to all firewalls instead of just one	17 Jun 202115:00	–	friendsofphp
Friends Of PHP	CVE-2021-32693: Authentication granted to all firewalls instead of just one	17 Jun 202115:00	–	friendsofphp
NVD	CVE-2021-32693	17 Jun 202123:15	–	nvd
OpenVAS	Symfony 5.3.x < 5.3.2 Incorrect Authentication Vulnerability (GHSA-rfcf-m67m-jcrq)	21 Jun 202100:00	–	openvas

Vulners

Node

symfony symfonyRange5.3.0–5.3.2composer

symfony security-httpRange5.3.0–5.3.2composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-rfcf-m67m-jcrq
github	www.github.com/symfony/symfony/commit/3084764ad82f29dbb025df19978b9cbc3ab34728
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32693
github	www.github.com/symfony/security-http/commit/6bf4c31219773a558b019ee12e54572174ff8129
symfony	www.symfony.com/blog/cve-2021-32693-authentication-granted-to-all-firewalls-instead-of-just-one
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2021-32693.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-32693.yaml
symfony	www.symfony.com/cve-2021-32693
github	www.github.com/advisories/GHSA-rfcf-m67m-jcrq

05 Feb 2024 11:13Current

1.6Low risk

Vulners AI Score1.6

CVSS 26.5

CVSS 3.16.8 - 8.8

EPSS0.00217