Lucene search
+L

149 matches found

attackerkb
attackerkb
•added 2021/11/16 10:15 a.m.•9 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.41851EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2021/11/16 10:15 a.m.•34 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS0.41851EPSS
SaveExploits2References2
Prion
Prion
•added 2021/11/16 10:15 a.m.•19 views

Authentication flaw

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

7.5CVSS9.2AI score0.41851EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2021/11/16 9:35 a.m.•2 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS0.41851EPSS
SaveExploits2References6
CVE
CVE
•added 2021/11/16 9:35 a.m.•125 views

CVE-2021-37580

Apache ShenYu Admin (ShenyuAdminBootstrap) contains an authentication bypass flaw due to the incorrect use of JWT, affecting ShenYu 2.3.0 and 2.4.0. The vulnerability can allow an attacker to bypass authentication and gain admin access, with high-severity CVSS scores (3.1: CRITICAL, base score 9....

9.8CVSS9.3AI score0.41851EPSS
SaveIn wildExploits2References2Affected Software1
Cvelist
Cvelist
•added 2021/11/16 9:35 a.m.•47 views

CVE-2021-37580 Apache ShenYu Admin bypass JWT authentication

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.6AI score0.41851EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•4 views

CVE-2021-37580: Improper Authentication

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS5.7AI score0.41851EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•11 views

PT-2021-21721 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.3.0 through 2.4.0 Description: A flaw was found in Apache ShenYu Admin, where the incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. Recommendations: For versions 2.3.0 and 2.4.0...

9.8CVSS9.3AI score0.41851EPSS
SaveExploits2References19
CNNVD
CNNVD
•added 2021/11/16 12:00 a.m.•20 views

Apache ShenYu 授权问题漏洞

Apache ShenYu is an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation.An authorization issue vulnerability exists in Apache ShenYu Admin, which stems from a misuse of JWT in ShenuAdminBootstrap allowing an attacker to bypass authentication. No...

9.8CVSS5.6AI score0.41851EPSS
SaveExploits2References3
Rows per page
Query Builder