Authentication Bypass

2018-02-1403:19:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.5%

JSON

xenon-common is vulnerable to authentication bypass. Xenon doesn’t correctly use access controls on utility endpoints which can result in information disclosure.

CPENameOperatorVersion
xenon-commoneq1.5.4
xenon-commoneq1.5.4-CR7
xenon-commonle1.5.7_7
xenon-commonle1.3.7-CR1_1
xenon-commonle1.5.4-CR6_1
xenon-commonle1.1.0-CR3
xenon-commonle1.4.2-CR4
xenon-commonle1.5.7_6

Name	Operator	Version
xenon-common	eq	1.5.4
xenon-common	eq	1.5.4-CR7
xenon-common	le	1.5.7_7
xenon-common	le	1.3.7-CR1_1
xenon-common	le	1.5.4-CR6_1
xenon-common	le	1.1.0-CR3
xenon-common	le	1.4.2-CR4
xenon-common	le	1.5.7_6