OPA for Windows has an SMB force-authentication vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-8260 · ADVISORY
• open-policy-agent/opa commit 10f4d55 · WEB
• open-policy-agent/opa · PACKAGE
• open-policy-agent/opa release v0.68.0 · WEB
• pkg.go.dev/vuln/GO-2024-3141 · WEB
• tenable.com/security/research/tra-2024-36 · WEB

github.com/open-policy-agent/opa のその他の脆弱性

• CVE-2025-46569高 7.4Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP …
• CVE-2022-36085緊急 9.8Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` fun…
• CVE-2022-33082高 7.5An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted i…
• CVE-2022-28946高 7.5An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causi…
• CVE-2022-23628中 5.3OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains …