Authentication Bypass

2024-07-1206:59:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

nats-io

nats-server

authentication bypass

vulnerability

failure to enforce

negative user permissions

attackers

exploit

queue subscription

wildcard

denied subjects

software

AI Score

6.6

Confidence

Low

JSON

github.com/nats-io/nats-server is vulnerable to Authentication bypass. The vulnerability is due to a failure to enforce negative user permissions in one scenario. Attackers can exploit this by using a queue subscription on the wildcard to access denied subjects.