GCVE - cpe:2.3:a:spnego_http_authentication_module_project:spnego_http_authentication

Approved changes feed: RSS · Atom

cpe:2.3:a:spnego_http_authentication_module_project:spnego_http_authentication_module:*:*:*:*:*:nginx:*:*

part: a version: * update: *

Vendor	Spnego Http Authentication Module Project (`72add8a2-52e7-560b-b200-b6d29634b51a`)
Product	Spnego Http Authentication Module (`b74d472e-926f-5a00-8162-201501ebdb1e`)
Edition	*
Language	*
Software edition	*
Target software	nginx
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21335`	vulnerable	2026-06-08 05:29:11.637925	Basic Authentication can be bypassed using a malformed username MEDIUM (5.3) In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of spnego-http-auth-nginx-module. As a workaround, one may disable basic authentication. Published: 2021-03-08T20:20:19.000Z Updated: 2024-08-03T18:09:15.422Z Open on db.gcve.eu Reference links https://github.com/stnoonan/spnego-http-auth-nginx-module/security/advisories/GHSA-ww8q-72rx-hc54 https://github.com/stnoonan/spnego-http-auth-nginx-module/commit/a06f9efca373e25328b1c53639a48decd0854570 https://github.com/stnoonan/spnego-http-auth-nginx-module/releases/tag/v1.1.1	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.