Approved changes feed: RSS · Atom
cpe:2.3:a:brokercap:bifrost:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Brokercap (fc3e6ec9-2434-5b16-aad1-b500f5a9be14) |
|---|---|
| Product | Bifrost (5dc306db-3a44-5cc0-ba35-9ab191dc128a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39267 |
vulnerable | 2026-06-08 05:47:18.469257 |
Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups
HIGH (8.8)
Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With: XMLHttpRequest field in the request header. This issue has been patched in 1.8.8-release. There are no known workarounds.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-04-23T16:45:31.308Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39219 |
vulnerable | 2026-06-08 05:47:18.366928 |
Bifrost users using basic authntication can bypass write permission limit
HIGH (8.5)
Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests when they are normally forbidden from doing so. Version 1.8.7-release contains a patch. There are currently no known workarounds.
Published: 2022-09-26T13:15:14.000Z
Updated: 2025-04-22T17:20:25.810Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.