CVE-2022-23945
EUVD-2022-050525.01.2022, 13:15
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | shenyu | 2.4.0 |
| apache | shenyu | 2.4.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.
- CWE-306 - Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
References