Description (CNA)
Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| github.com/nanobox-io/golang-nanoauth / github.com/nanobox-io/golang-nanoauth | affected 0.0.0-20160722212129-ac0cc4484ad4 before 0.0.0-20200131131040-063a3fb69896 |
CWE
No CWE identifiers supplied.
References
- https://github.com/nanobox-io/golang-nanoauth/pull/5
- https://github.com/nanobox-io/golang-nanoauth/commit/063a3fb69896acf985759f0fe3851f15973993f3
- https://pkg.go.dev/vuln/GO-2020-0004
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.