PT-2026-103835 · Apache · Apache Apisix
CVSS v4.0
5.1
متوسطة
| المتجه | AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N |
Name of the Vulnerable Software and Affected Versions
Apache APISIX versions 3.12.0 through 3.18.0
Description
Improper Authentication occurs when using the openid-connect plugin with remote introspection against an authorization server that serves multiple issuers. In this scenario, a token that is active for one issuer may be incorrectly accepted on a route restricted to a different issuer.
Recommendations
Upgrade to version 3.19.0.
إصلاح
Improper Authentication
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Apache Apisix