NATS nats-server before 2.7.2 has... CVE-2022-24450

9.0 AV AC AU C I A
发布: 2022-02-08
修订: 2024-11-21

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

0%
暂无可用Exp或PoC
当前有2条受影响产品信息