Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47448
HistoryJun 10, 2024 - 1:52 p.m.

Authentication Bypass By Spoofing

2024-06-1013:52:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
github
kubernetes
spoofing
vulnerability
token authentication
json web token

7.1 High

AI Score

Confidence

Low

github.com/kubernetes/kubernetes/ is vulnerable to Authentication Bypass By Spoofing. The vulnerability is due to improper issuers check which allows an attacker to bypass the issue (β€œiss”) check during JSON Web Token (JWT) authentication.

7.1 High

AI Score

Confidence

Low