CVE-2021-45890

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier...

CVE-2021-45890

creationtimestamp| type| source ---|---|--- 2021-12-27 22:23:13+00:00| seen| https://t.me/cibsecurity/34686...

CVE-2021-45890

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier...

CVE-2021-45890

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier...

CVE-2021-45890

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier...

CVE-2021-45890

AuthGuard (before v0.9.0) is vulnerable due to a flaw in basic/BasicAuthProvider.java that allows authentication via an inactive identifier. The issue enables bypassing identity checks within the authentication flow, effectively permitting login even when the identifier should be inactive. This v...