Lucene search

Access Control Bypass

🗓️ 13 Jun 2024 06:22:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 10 Views

OAuthenticator Vulnerable to Access Control Bypass

Reporter	Title	Published	Views	Family All 8
OSV	CGA-qwcg-8rgg-jfqm	13 Jun 202416:06	–	osv
OSV	Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0	12 Jun 202417:13	–	osv
OSV	CVE-2024-37300	12 Jun 202416:15	–	osv
Cvelist	CVE-2024-37300 Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0	12 Jun 202415:20	–	cvelist
NVD	CVE-2024-37300	12 Jun 202416:15	–	nvd
Wolfi	CVE-2024-37300 vulnerabilities	7 Dec 202403:13	–	wolfi
Github Security Blog	Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0	12 Jun 202417:13	–	github
CVE	CVE-2024-37300	12 Jun 202416:15	–	cve

Vulners

Node

veracode oauthenticatorRange16.3.0–16.3.0

Source	Link
github	www.github.com/jupyterhub/oauthenticator/commit/d1aea05fa89f2beae15ab0fa0b0d071030f79654
github	www.github.com/jupyterhub/oauthenticator/security/advisories/GHSA-gprj-3p75-f996
jupyterhub	www.jupyterhub.readthedocs.io/en/stable/howto/upgrading-v5.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jun 2024 06:34Current

8.0High risk

Vulners AI Score8.0

CVSS38.1

EPSS0.000