CVE-2023-22495 — Izanami is vulnerable to Authorization Bypass
Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed us…
Published: 2023-01-14 · CVSS: 9.8 · CVSS 3.1
Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token (JWT), an attacker could compromise another instance of Izanami. This issue has been patched in version 1.11.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7