Lucene search
+L

4 matches found

NVD
NVD
•added 2021/10/07 7:15 p.m.•32 views

CVE-2021-41130

Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP header "X-Endpoint-API-UserInfo", the application can use ...

6.4CVSS0.00388EPSS
SaveExploits0References4
Mend
Mend
•added 2021/10/07 6:30 p.m.•7 views

CVE-2021-41130

Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP header "X-Endpoint-API-UserInfo", the application can use ...

6.4CVSS0.00388EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•15 views

CVE-2021-41130: Authentication Bypass by Spoofing

Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP header "X-Endpoint-API-UserInfo", the application can use ...

6.4CVSS5.7AI score0.00388EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/10/07 12:00 a.m.•9 views

PT-2021-23114

Name of the Vulnerable Software and Affected Versions Extensible Service Proxy ESP versions prior to 1.58.0 Description The Extensible Service Proxy ESP is a proxy that enables API management capabilities for JSON/REST or gRPC API services. It can be configured to authenticate a JWT token, and th...

6.4CVSS0.00388EPSS
SaveExploits0References7
Rows per page
Query Builder