Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35715
HistoryMay 26, 2022 - 6:10 a.m.

Authentication Bypass

2022-05-2606:10:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
github.com/pingcap/tidb
authentication bypass
vulnerability
library
access path
attacker
authentication process
malicious authentication requests
privilege escalation
unauthorized access
software

EPSS

0

Percentile

12.6%

github.com/pingcap/tidb is vulnerable to Authentication Bypass. The vulnerability exists because the library does not properly restrict the access path, allowing an attacker to bypass the authentication process by providing malicious authentication requests, resulting in privilege escalation or unauthorized access.

EPSS

0

Percentile

12.6%

Related for VERACODE:35715