CVE-2022-24450

Description

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Affected packages (6)

• Bitnami/nats>= 2.0.0, < 2.7.2
• Go/github.com/nats-io/nats-serverfrom 0
• Go/github.com/nats-io/nats-server/v2>= 2.0.0, < 2.7.2
• Go/github.com/nats-io/nats-server/v2>= 2.0.0, < 2.7.2
• Go/github.com/nats-io/nats-streaming-server>= 0.15.0, < 0.24.1
• Go/github.com/nats-io/nats-streaming-server>= 0.15.0, < 0.24.1

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-24450
• PATCHhttps://github.com/nats-io/nats-server
• WEBhttps://advisories.nats.io/CVE/CVE-2022-24450.txt
• WEBhttps://github.com/nats-io/nats-server/releases/tag/v2.7.2
• WEBhttps://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7