CVE-2023-22495
Critical
Description
Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token (JWT), an attacker could compromise another instance of Izanami. This issue has been patched in version 1.11.0.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMaif Izanami
PublishedJan 14, 2023
First seenJan 14, 2023
Weakness typeCWE-288CWE-288
How to fix
Update
- maif izanami1.11.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maif izanami | v < 1.11.0 | 1.11.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.