HOMEVULNERABILITIESVENDORSSpnego Http Authentication Module Project

Spnego Http Authentication Module ProjectCVEs & Vulnerabilities

1 CVEs affecting Spnego Http Authentication Module Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

spnego http authentication module 1
CVE-2021-21335CRITICAL

In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of spnego-http-auth-nginx-module. As a workaround, one may disable basic authentication.

9 Mar 2021
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Spnego Http Authentication Module Project CVEs & Vulnerabilities — 1 Tracked