Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-94xh-prxv-w7r3

Опубликовано: 12 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.

Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.

EPSS

Процентиль: 79%
0.01215
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.8
nvd
7 месяцев назад

Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.

EPSS

Процентиль: 79%
0.01215
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732