Lucene search
GoogleOSV:GHSA-9R5X-FJV3-Q6H4HistoryFeb 15, 2022 - 1:57 a.m.
Incorrect Access Control in github.com/nats-io/jwt and github.com/nats-io/nats-server/v2
2022-02-1501:57:18
Google
osv.dev
12
github
nats server
jwt library
incorrect access control
import token
mishandled.
EPSS
0.003
Percentile
66.3%
NATS Server (github.com/nats-io/nats-server/v2/server) 2.x before 2.2.0 and JWT library (github.com/nats-io/jwt/v2) before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.
Related
ubuntucve
ubuntucve
CVE-2021-3127
2021-03-16 00:00:00
cve
cve
CVE-2021-3127
2021-03-16 20:15:13
osv
osv
BIT-nats-2021-3127
2024-03-06 10:58:33
CVE-2021-3127
2021-03-16 20:15:13
Import token permissions checking not enforced in github.com/nats-io/jwt
2022-07-01 20:11:22
debiancve
debiancve
CVE-2021-3127
2021-03-16 20:15:13
prion
prion
Design/Logic Flaw
2021-03-16 20:15:00
veracode
veracode
Insecure Token Permissions
2021-05-24 08:04:24
github
github
nats-io/jwt not enforcing checking of Import token permissions
2022-02-15 00:42:28
nvd
nvd
CVE-2021-3127
2021-03-16 20:15:13
cvelist
cvelist
CVE-2021-3127
2021-03-16 19:55:10
redhatcve
redhatcve
CVE-2021-3127
2021-03-30 07:26:55