Lucene search
Veracode Vulnerability DatabaseVERACODE:29592HistoryMar 08, 2021 - 4:56 a.m.
Authorization Bypass
2021-03-0804:56:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
28.4%
github.com/spiffe/spire is vulnerable to authorization bypass. The vulnerability exists as requests made to the FetchX509SVID RPC can issue a X.509 certificate with a URI SAN for a SPIFFE ID to an unauthorized agent.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/spiffe/spire | le | 0.8.4 | |
| github.com/spiffe/spire | le | 0.9.3 |
Related
cve
cve
CVE-2021-27098
2021-03-05 17:15:14
nvd
nvd
CVE-2021-27098
2021-03-05 17:15:14
cvelist
cvelist
CVE-2021-27098
2021-03-05 16:59:06
github
github
prion
prion
Design/Logic Flaw
2021-03-05 17:15:00
osv
osv
Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node
2021-05-21 14:31:11
CVE-2021-27098
2021-03-05 17:15:14