Read the docs

Tyk

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tyk records in CISA KEV

No Tyk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tyk 3 records HIGH Tyk-identity-broker 1 record MEDIUM

Records

1 record in Tyk-identity-broker · all components

TI-2021-06060 CVE-2021-23365 · GHSA-599h-8wpj-75xj

Authentication bypass in github.com/TykTechnologies/tyk-identity-broker

Priority MEDIUM 41

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01011 Published 2021-04-26 Fixed in 1.1.1 CWE-287
Open these records in search →