Lucene search
Veracode Vulnerability DatabaseVERACODE:31035HistoryJun 23, 2021 - 4:48 a.m.
Insecure Token Validation
2021-06-2304:48:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
insecure validation
token claim
cache vulnerability
software
EPSS
0.001
Percentile
48.2%
github.com/ory/oathkeeper is using an insecure token validation. It bypasses token claim validation once a token is in the cache. The vulnerability exists only when caching is not disabled.
Related
github
github
Incorrect Authorization in ORY Oathkeeper
2021-06-24 20:16:02
osv
osv
Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
2024-08-21 15:29:08
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
2024-08-21 14:30:31
CVE-2021-32701
2021-06-22 20:15:08
cvelist
cvelist
prion
prion
Design/Logic Flaw
2021-06-22 20:15:00
cve
cve
CVE-2021-32701
2021-06-22 20:15:08
nvd
nvd
CVE-2021-32701
2021-06-22 20:15:08