CVE-2016-10525

2018-05-2920:29:00

Google

osv.dev

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.4%

JSON

When attempting to allow authentication mode try in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.

CPENameOperatorVersion
hapi-auth-jwt2eq5.0.7
hapi-auth-jwt2eq5.0.4
hapi-auth-jwt2eq4.8.1
hapi-auth-jwt2eq5.0.5
hapi-auth-jwt2eq5.0.0
hapi-auth-jwt2eq5.0.1
hapi-auth-jwt2eq4.8.0
hapi-auth-jwt2eq5.1.0
hapi-auth-jwt2eq5.1.1
hapi-auth-jwt2eq5.0.2

Name	Operator	Version
hapi-auth-jwt2	eq	5.0.7
hapi-auth-jwt2	eq	5.0.4
hapi-auth-jwt2	eq	4.8.1
hapi-auth-jwt2	eq	5.0.5
hapi-auth-jwt2	eq	5.0.0
hapi-auth-jwt2	eq	5.0.1
hapi-auth-jwt2	eq	4.8.0
hapi-auth-jwt2	eq	5.1.0
hapi-auth-jwt2	eq	5.1.1
hapi-auth-jwt2	eq	5.0.2