CVE-2021-43116: High severity nacos vulnerability
Published Jul 5, 2022
·Updated
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.
Affected Software
1 affected component
Alibaba Nacos<=2.0.3
Event History
Jul 5, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2021-43116?
CVE-2021-43116 is an Access Control vulnerability that exists in Nacos 2.0.3 on the access prompt page.
2
How does CVE-2021-43116 work?
CVE-2021-43116 allows a malicious user to login by capturing packets on the access prompt page and changing the returned package.
3
What is the severity of CVE-2021-43116?
CVE-2021-43116 has a severity value of 8.8, which is considered high.
4
How do I fix CVE-2021-43116?
To fix CVE-2021-43116, update Nacos to a version higher than 2.0.3.
5
Where can I find more information about CVE-2021-43116?
You can find more information about CVE-2021-43116 at the following references: [link1], [link2], [link3].