CVE-2020-19676

Nacos 1.1.4 is affected by: Incorrect Access Control

published September 30, 2020

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01420 · 72.6th percentile
Published
2020-09-30T17:52Z
EPSS history
Timeline
  • 30 SEP 17:52Z
    Nacos 1.1.4 is affected by: Incorrect Access Control
    cvelistv5