268 matches found
GO-2024-2939 SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb
SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb...
The vulnerability of the SpiceDB database management system, related to improper storage of permissions, allows a perpetrator to compromise data integrity.
The vulnerability of the SpiceDB database management system is related to the improper storage of permissions. Exploiting this vulnerability allows a malicious actor to influence data integrity through the CheckPermission parameter...
Improper Preservation Of Permissions
github.com/authzed/spicedb is vulnerable to Improper Preservation Of Permissions. The vulnerability is due to a failure in the exclusion dispatcher to request all the folders in which the user is a member, leading to an incorrect NOPERMISSION response when the user should have permission...
CVE-2024-38361 vulnerabilities
Vulnerabilities for packages: spicedb...
CVE-2024-38361 vulnerabilities
Vulnerabilities for packages: spicedb...
CVE-2024-38361
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. If the resource exists under multiple...
CVE-2024-38361
SpiceDB (spicedb) vulnerability CVE-2024-38361 affects the permission-check flow: an exclusion under an arrow with multiple resources may cause a NO_PERMISSION response when PERMISSION is expected on CheckPermission, due to a failure in the exclusion dispatcher to query all folders a user can acc...
CVE-2024-38361 Permissions processing error in spacedb
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. If the resource exists under multiple...
CVE-2024-38361 Permissions processing error in spacedb
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. If the resource exists under multiple...
CVE-2024-38361 Permissions processing error in spacedb
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. If the resource exists under multiple...
SpiceDB exclusions can result in no permission returned when permission expected
Background Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. For example, given this schema: zed definition user definition folder relation member: user relation banned: user permission view = member - banned definition resourc...
GHSA-GRJV-GJGR-66G2 SpiceDB exclusions can result in no permission returned when permission expected
Background Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. For example, given this schema: zed definition user definition folder relation member: user relation banned: user permission view = member - banned definition resourc...
GHSA-GRJV-GJGR-66G2 vulnerabilities
Vulnerabilities for packages: spicedb...
GHSA-GRJV-GJGR-66G2 vulnerabilities
Vulnerabilities for packages: spicedb...
CVE-2024-38361: Improper Preservation of Permissions
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to NOPERMISSION when permission is expected. If the resource exists under multiple...
Spicedb Security Vulnerabilities
SpiceDB is a fine-grained permissions database from the Authzed team. A security vulnerability exists in versions of Spicedb prior to v1.33.1, which stems from the fact that if a resource exists under multiple folders and a user is authorized to view multiple folders, SpiceDB may report that the...
GHSA-87M9-RV8P-RGMG vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, spicedb...
GHSA-87M9-RV8P-RGMG vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, spicedb, opentelemetry-collector-contrib...
GO-2024-2716 SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb...