Lucene search
+L

3 matches found

OSV
OSV
•added 2024/08/30 3:31 p.m.•19 views

GHSA-C77R-FH37-X2PX OPA for Windows has an SMB force-authentication vulnerability

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s...

6.1CVSS6.7AI score0.00341EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/08/30 3:31 p.m.•28 views

OPA for Windows has an SMB force-authentication vulnerability

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s...

7.3CVSS7.1AI score0.00341EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•2 views

CVE-2024-8260: Authentication Bypass by Capture-replay

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s...

7.3CVSS7.1AI score0.00341EPSS
SaveExploits0References1
Rows per page
Query Builder