OPA for Windows has an SMB force-authentication vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-8260 · ADVISORY
• open-policy-agent/opa commit 10f4d55 · WEB
• open-policy-agent/opa · PACKAGE
• open-policy-agent/opa release v0.68.0 · WEB
• pkg.go.dev/vuln/GO-2024-3141 · WEB
• tenable.com/security/research/tra-2024-36 · WEB

Lỗ hổng khác của github.com/open-policy-agent/opa

• CVE-2025-46569CAO 7.4Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP …
• CVE-2022-36085NGHIÊM TRỌNG 9.8Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` fun…
• CVE-2022-33082CAO 7.5An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted i…
• CVE-2022-28946CAO 7.5An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causi…
• CVE-2022-23628TRUNG BÌNH 5.3OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains …