GitHub Advisoryadvisory · Go

GHSA-pmhg-cmjc-3875 Ansible Semaphore mishandles authentication

CRITICAL Published 2023-03-18 Modified 2023-03-23 Official page ↗

Aliases: CVE-2023-28609
Ecosystem: Go
Packages: github.com/ansible-semaphore/semaphore
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-287
Reviewed: 2023-03-20

Affected packages

• Go github.com/ansible-semaphore/semaphore: < 2.8.89 → fixed in 2.8.89

Description

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.

Related

Alias · CVE (1)

CVE-2023-28609 api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication. vulnerability

Weakness · CWE (1)

CWE-287 Improper Authentication weakness

References