Github.Com/Tyktechnologies/Tyk Identity Broker
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:github.com/tyktechnologies/tyk-identity-broker:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Github.Com/Tyktechnologies/Tyk Identity Broker (74552a52-7a18-5a36-b170-07e052ff1fc8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23365 |
vulnerable | 2026-06-08 05:30:02.802488 |
Authentication Bypass
MEDIUM (4.8)
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data).
Published: 2021-04-26T10:05:33.138Z
Updated: 2024-09-17T00:56:27.158Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.