PT-2018-4705

Name of the Vulnerable Software and Affected Versions hapi-auth-jwt2 versions prior to 5.1.2 Description The issue allows for a complete authentication bypass when in the try authentication mode. This means that individuals could bypass the authentication process. Recommendations Update to versio...

Authentication Bypass

Overview Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later. References - Issue 111 - PR 112 - GitHub Advisory...