NATS nats-server before 2.7.2 has Incorrect Access Control
published February 8, 2022
CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is
NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01330 · 70.8th percentile
Published
2022-02-08T01:14Z
EPSS history
Timeline
08 FEB 01:14Z
NATS nats-server before 2.7.2 has Incorrect Access Control