critical9.8
CVE-2023-28609
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
Impact
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ansible-Semaphore | Ansible Semaphore | before 2.8.89 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1
- https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89
- https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1
- https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89