Read the docs

Spnego Http Authentication Module Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Spnego Http Authentication Module Project records in CISA KEV

No Spnego Http Authentication Module Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spnego Http Authentication Module 1 record MEDIUM

Records

1 record in Spnego Http Authentication Module · all components

TI-2021-04435 CVE-2021-21335

Basic Authentication can be bypassed using a malformed username

Priority MEDIUM 45

In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0166 Published 2021-03-08 Fixed in 1.1.1 CWE-287
Open these records in search →