Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2020-36569

Authentication bypass in github.com/nanobox-io/golang-nanoauth

Description

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

github.com/nanobox-io/golang-nanoauth github.com/nanobox-io/golang-nanoauth

Default version status: unaffected

  • 0.0.0-20160722212129-ac0cc4484ad4 to < 0.0.0-20200131131040-063a3fb69896affected

References