Описание
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.3 (включая)
cpe:2.3:a:alibaba:nacos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.12517
Средний
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
EPSS
Процентиль: 94%
0.12517
Средний
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-287