Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups
Résumé
Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With: XMLHttpRequest field in the request header. This issue has been patched in 1.8.8-release. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com