Lucene search
Veracode Vulnerability DatabaseVERACODE:37289HistorySep 27, 2022 - 4:54 a.m.
Authentication Bypass
2022-09-2704:54:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
26.8%
github.com/brokercap/bifrost is vulnerable to authentication bypass. The vulnerability exists in common.go because the write permission limit for monitor group is not properly defined which allows an attacker to bypass permission using HTTP basic authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/brokercap/bifrost | le | v1.8.6-release | |
| github.com/brokercap/bifrost | le | v1.8.6-release |
Related
github
github
prion
prion
Authentication flaw
2022-09-26 14:15:00
nvd
nvd
CVE-2022-39219
2022-09-26 14:15:10
osv
osv
Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication
2022-09-27 15:45:09
CVE-2022-39219
2022-09-26 14:15:10
cnvd
cnvd
Bifrost Licensing Issue Vulnerability
2022-09-28 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-39219
2022-09-26 14:15:10