Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/08 12:00 a.m.•3 views

CVE-2021-21335: Improper Authentication

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

9.8CVSS5.8AI score0.0166EPSS
SaveExploits0References2
Rows per page
Query Builder