Xbifrost

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xbifrost records in CISA KEV

No Xbifrost vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bifrost 2 records HIGH

Records

2 records

TI-2022-18598 CVE-2022-39219 · GHSA-p6fh-xc6r-g5hw

Bifrost users using basic authntication can bypass write permission limit

HIGH 70

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01176 Published 2022-09-26 Fixed in 1.8.7-release CWE-287

TI-2022-18643 CVE-2022-39267 · GHSA-mxrx-fg8p-5p5j

Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups

MEDIUM 42

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00899 Published 2022-10-19 Fixed in 1.8.8-release, 1.8.7-release CWE-287

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0