Lucene search

K

GoogleOSV:GO-2024-2980

HistoryJul 12, 2024 - 4:45 p.m.

NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server

2024-07-1216:45:14

Google

osv.dev

2

nats

streaming

server

permissions

subjects

github

AI Score

6.4

Confidence

High

NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server

References

github.com/advisories/GHSA-2h2x-8hh2-mfq8

github.com/nats-io/advisories/blob/main/CVE/CVE-2022-29946.txt

nvd.nist.gov/vuln/detail/CVE-2022-29946

AI Score

6.4

Confidence

High

Related for OSV:GO-2024-2980

osv2 redhatcve1 github1 veracode1 ubuntucve1 cve1 cvelist1 vulnrichment1 debiancve1 nvd1