Tyk Identity Broker
Approved changes feed: RSS · Atom
cpe:2.3:a:tyk:tyk-identity-broker:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tyk (8fc11856-faa0-5ab8-8862-7f1235136b24) |
|---|---|
| Product | Tyk Identity Broker (3f8fceb9-0ecb-53b4-97d6-5603df9cb2f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tyktechnologies/tyk-identity-broker |
purl2cpe | 2026-06-01 10:15:44.483942 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23365 |
vulnerable | 2026-06-08 05:30:02.803437 |
Authentication Bypass
MEDIUM (4.8)
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data).
Published: 2021-04-26T10:05:33.138Z
Updated: 2024-09-17T00:56:27.158Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.