Lucene search

Issue with whitespace in JWT roles in OpenSearch

🗓️ 24 Jan 2023 20:19:47Reported by GoogleType

osv🔗 osv.dev👁 32 Views

Issue with whitespace in JWT roles in OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.

Reporter	Title	Published	Views	Family All 10
Veracode	Authentication Bypass	25 Jan 202302:05	–	veracode
Github Security Blog	Issue with whitespace in JWT roles in OpenSearch	24 Jan 202320:47	–	github
Prion	Design/Logic Flaw	26 Jan 202321:18	–	prion
OSV	CVE-2023-23612	26 Jan 202321:18	–	osv
Debian CVE	CVE-2023-23612	26 Jan 202321:18	–	debiancve
UbuntuCve	CVE-2023-23612	26 Jan 202300:00	–	ubuntucve
CVE	CVE-2023-23612	26 Jan 202321:18	–	cve
NVD	CVE-2023-23612	26 Jan 202321:18	–	nvd
Cvelist	CVE-2023-23612 Issue with whitespace in JWT roles in OpenSearch	24 Jan 202320:36	–	cvelist
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	12 Aug 202422:17	–	ibm

Source	Link
github	www.github.com/opensearch-project/security/security/advisories/GHSA-864v-6qj7-62qj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-23612
github	www.github.com/opensearch-project/OpenSearch/releases/tag/2.5.0
github	www.github.com/opensearch-project/security

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jan 2023 20:47Current

0.7Low risk

Vulners AI Score0.7

CVSS38.8

EPSS0.001