PT-2018-16196

CVE-2018-3778

Publicado

2018-08-08

Atualizado

2023-02-28

Descrição por

CVSS 3.1

5.3

Média

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions aedes versions prior to 0.35.1

Description The issue is related to improper authorization, where aedes does not respect its own authorization rules when a client sets a Last Will. This can lead to publishing a Last Will and Testament (LWT) in a channel even when the client is not authorized.

Recommendations Update to version 0.35.1 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Matteo Collina

Mcollina

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-863: Incorrect Authorization

CWE-285: Improper Authorization