Authentication mechanism absence or evasion In github.com/nats-io/nats-server/v2
Description
NATS: Message tracing can be redirected to arbitrary subject
Impact
A valid client which uses message tracing headers can indicate that the trace messages can be sent to an arbitrary valid subject, including those to which the client does not have publish permission. The payload is a valid trace message and not attacker chosen.
Patches
Fixed in nats-server 2.12.6 & 2.11.15
Workarounds
None safe to use.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | github.com/nats-io/nats-server/v2 | 2.11.15, 2.12.6 |
Aliases