March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Quasar RAT – Active IOCs
December 28, 2021
Rewterz Threat Alert – APT C-23 aka AridViper Active in Middle East Region – Active IOCs
December 28, 2021
Rewterz Threat Alert – Quasar RAT – Active IOCs
December 28, 2021
Rewterz Threat Alert – APT C-23 aka AridViper Active in Middle East Region – Active IOCs
December 28, 2021
Severity
High
Analysis Summary
CVE-2021-45232
Apache APISIX Dashboard could allow a remote attacker to bypass security restrictions, caused by improper authentication validation by the Manager API. By sending a specially-crafted request using the interface of framework “gin”, an attacker could exploit this vulnerability to bypass authentication.
Impact
- Security Bypass
Affected Vendors
Apache
Affected Products
- Apache APISIX Dashboard 2.10
Remediation
Upgrade to the latest version of Apache APISIX, available from the apisix-dashboard GIT Repository.