Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2021-43116

Published: 05/07/2022 Updated: 03/04/2023
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Subscribe to Nacos

Vulnerability Summary

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

alibaba nacos

Exploits

Exploit DB: Nacos 2.0.3 Access Control
Nacos version 203 suffers from an access control vulnerability ...

References

CWE-287https://github.com/alibaba/nacos/issues/7182https://github.com/alibaba/nacos/issues/7127http://packetstormsecurity.com/files/171638/Nacos-2.0.3-Access-Control.htmlhttps://nvd.nist.govhttps://packetstormsecurity.com/files/171638/Nacos-2.0.3-Access-Control.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook