Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103668
HistoryDec 28, 2021 - 12:00 a.m.

Apache Apisix Licensing Issue Vulnerability

2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
apache apisix
cloud-native
microservices
api gateway
openresty
etcd
vulnerability
authorization
dashboard
authentication
network system
configuration information
api management

EPSS

0.971

Percentile

99.8%

Apache Apisix is a cloud-native microservices API gateway service from the Apache Foundation in the United States. The software is based on OpenResty and etcd for dynamic routing and plug-in hot-loading, and is suitable for API management in microservice systems. an authorization issue vulnerability exists in Apache APISIX Dashboard, which stems from a lack of authentication measures or insufficient authentication strength in the network system or product. An attacker could use this vulnerability to directly access the interface of certain APIs to obtain configuration information.

EPSS

0.971

Percentile

99.8%