Published: 08/02/2022 Updated: 08/08/2023

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 802

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

NATS nats-server prior to 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nats nats streaming server
nats nats server

Synopsis Important: Red Hat Advanced Cluster Management 25 security updates, images, and bug fixes Type/Severity Security Advisory: Important Topic Red Hat Advanced Cluster Management for Kubernetes 250 is now generally availableRed Hat Product Security has rated this update as having a security impactof Important A Common Vulnerability ...

Synopsis Moderate: Red Hat Advanced Cluster Management 244 security updates and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 244 GeneralAvailability release images This update provides security fixes, bug fixes, and updates container imagesRed Hat Product Security has rated ...

Synopsis Moderate: Red Hat Advanced Cluster Management 245 security updates and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 245 GeneralAvailability release images, which fix bugs and update container imagesRed Hat Product Security has rated this update as having a security ...

Synopsis Moderate: Red Hat Advanced Cluster Management 251 security updates and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 251 GeneralAvailability release images, which fix security issues and bugsRed Hat Product Security has rated this update as having a security impactof ...

Synopsis Moderate: Red Hat Advanced Cluster Management 243 security updates and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 243 General Availability release images This update provides security fixes, bug fixes, and updates the container imagesRed Hat Product Security has ...

Synopsis Important: Red Hat Advanced Cluster Management 242 security updates and bug fixes Type/Severity Security Advisory: Important Topic Red Hat Advanced Cluster Management for Kubernetes 242 General Availabilityrelease images This update provides security fixes, fixes bugs, and updates the container imagesRed Hat Product Security ha ...

NATS nats-server before 272 has Incorrect Access Control Any authenticated user can obtain the privileges of the System account by misusing the &quot;dynamically provisioned sandbox accounts&quot; feature ...

oss-sec mailing list archives   By Date By Thread </form>    [CVE-2022-24450] nats-server unconstrained account assumption by authenticated clients  <!--X-Head- ...

Frogbot Table of contents What is Frogbot? Scan pull requests when they are opened Scanning repositories and fixing issues Installing Frogbot Reporting issues Contributions 🤖 What is Frogbot? Frogbot is a Git bot that scans your pull requests and repositories for security vulnerabilities You can scan pull requests when they are opened, and Git repositories following

Frogbot Table of contents What is Frogbot? How does it work? General GitHub GitLab Pull Request Comments Installing and Using Frogbot Contributions 🤖 What is Frogbot? Frogbot is a Git bot that scans your pull requests for security vulnerabilities using JFrog Xray Frogbot adds the scan results as a comment on the pull request If no new vulnerabilities are found

Frogbot Table of contents What is Frogbot? Scan pull requests when they are opened Scanning repositories following new commits Installing and using Frogbot Contributions 🤖 What is Frogbot? Frogbot is a Git bot that scans your pull requests and repositories for security vulnerabilities You can scan pull requests when they are opened, and Git repositories following ne

CWE-862 https://github.com/nats-io/nats-server/releases/tag/v2.7.2 https://advisories.nats.io/CVE/CVE-2022-24450.txt https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:4956 https://access.redhat.com/security/cve/cve-2022-24450

CVE-2022-24450

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect