Lucene search
Veracode Vulnerability DatabaseVERACODE:36349HistoryJul 14, 2022 - 5:23 a.m.
Insecure Session
2022-07-1405:23:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
32.5%
github.com/flyteorg/flyteadmin is vulnerable to insecure session. The vulnerability exists in ValidateAccessToken function in resource_server.go because the access token keys are not properly validated which allows an attacker to access the server using expired tokens.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/flyteorg/flyteadmin | le | v1.1.30 | |
| github.com/flyteorg/flyteadmin | le | v1.1.30 |
Related
osv
osv
FlyteAdmin Insufficient AccessToken Expiration Check
2022-07-15 18:10:48
CVE-2022-31145
2022-07-13 21:15:08
Improper validation of access tokens in github.com/flyteorg/flyteadmin
2022-07-30 03:51:07
cvelist
cvelist
CVE-2022-31145 Insufficient AccessToken Expiration Check in FlyteAdmin
2022-07-13 20:30:12
nvd
nvd
CVE-2022-31145
2022-07-13 21:15:08
github
github
FlyteAdmin Insufficient AccessToken Expiration Check
2022-07-15 18:10:48
prion
prion
Authorization
2022-07-13 21:15:00
cve
cve
CVE-2022-31145
2022-07-13 21:15:08