CVE-2021-27306

An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without…

published March 18, 2021

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01789 · 78.2th percentile
Published
2021-03-18T14:02Z
EPSS history
Timeline
  • 18 MAR 14:02Z
    An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without…
    cvelistv5