Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r2p-7499-27q3

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

EPSS

Процентиль: 19%
0.00271
Низкий

7.4 High

CVSS3

Дефекты

CWE-1188

Связанные уязвимости

CVSS3: 7.4
ubuntu
3 месяца назад

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

CVSS3: 7.4
redhat
3 месяца назад

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

CVSS3: 7.4
nvd
3 месяца назад

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.

CVSS3: 7.4
debian
3 месяца назад

When using an IPv6 allow-list for the Auth Proxy feature, it defaults ...

CVSS3: 7.4
fstec
3 месяца назад

Уязвимость функции Auth Proxy платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 19%
0.00271
Низкий

7.4 High

CVSS3

Дефекты

CWE-1188