Lucene search
Veracode Vulnerability DatabaseVERACODE:40064HistoryApr 06, 2023 - 2:51 p.m.
Authentication Bypass
2023-04-0614:51:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
authentication bypass
farm_haystack
docker-compose.yml
hard-coded
security-relevant constants
annotation process
vulnerability
EPSS
0.002
Percentile
53.2%
farm_haystack is vulnerable to Authentication Bypass. The vulnerability exists in docker-compose.yml due to the use of hard-coded, security-relevant constants which allows an attacker to make changes in the annotation process.
Related
osv
osv
Use of hard-coded, security-relevant constants in deepset-ai/haystack
2023-03-30 12:30:15
CVE-2023-1712
2023-03-30 10:15:07
huntr
huntr
Annotation tool: token forgery using jwt secret to claim super admin role
2023-03-22 18:47:40
prion
prion
Hardcoded credentials
2023-03-30 10:15:00
cve
cve
CVE-2023-1712
2023-03-30 10:15:07
github
github
Use of hard-coded, security-relevant constants in deepset-ai/haystack
2023-03-30 12:30:15
cvelist
cvelist
nvd
nvd
CVE-2023-1712
2023-03-30 10:15:07