CVE-2021-45890

2021-12-2720:15:07

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier.

CPENameOperatorVersion
authguardeq0.7.0
authguardeq0.6.0
authguardeq0.8.0
authguardeq0.5.0
authguardeq0.3.0
authguardeq0.6.1

Name	Operator	Version
authguard	eq	0.7.0
authguard	eq	0.6.0
authguard	eq	0.8.0
authguard	eq	0.5.0
authguard	eq	0.3.0
authguard	eq	0.6.1

References

github.com/AuthGuard/AuthGuard/commit/9783b1143da6576028de23e15a1f198b1f937b82

github.com/AuthGuard/AuthGuard/compare/v0.8.0...v0.9.0

github.com/AuthGuard/AuthGuard/issues/166

github.com/AuthGuard/AuthGuard/pull/181