Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Alibaba Component: Nacos Clear all filters
TI-2021-19162 CVE-2021-43116 · GHSA-2g86-r6w2-wqqr

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter…

Priority MEDIUM 48

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07464 Published 2022-07-05 No fix listed CWE-287
TI-2021-10154 CVE-2021-29441 · GHSA-36hp-jr8h-556f

Authentication bypass in Alibaba nacos

Priority HIGH 83

Nacos is a platform designed for dynamic service discovery and configuration and service management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83236 Published 2021-04-27 Fixed in 1.4.1 CWE-290
TI-2021-10155 CVE-2021-29442 · GHSA-xv5h-v7jh-p2qh

Authentication bypass in Alibaba nacos

Priority HIGH 73

Nacos is a platform designed for dynamic service discovery and configuration and service management.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.64205 Published 2021-04-27 Fixed in 1.4.1 CWE-306