Junglewise Threat Intelligence
CVE-2022-29946: GO-2024-2980 - NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server
CVE-2022-29946 · Severity: low · CVSS 3.1 · Published 2024-07-12
Technologies: github.com/nats-io/nats-server/v2 (Go), github.com/nats-io/nats-streaming-server (Go), github.com/nats-io/nats-server (Go). Vendors: Go.
Executive brief
NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server
Affected products
- Go github.com/nats-io/nats-server/v2
- Go github.com/nats-io/nats-streaming-server
- Go github.com/nats-io/nats-server