Vulnerabilities > CVE-2021-3127 - Improper Handling of Exceptional Conditions vulnerability in Nats JWT Library and Nats Server

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2021-03-16

Updated: 2022-07-12

Summary

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

Part	Description	Count
Application	Nats Nats JWT Library - Nats JWT Library 0.0.3 Nats JWT Library 0.0.4 Nats JWT Library 0.0.5 Nats JWT Library 0.0.6 Nats JWT Library 0.0.8 Nats JWT Library 0.1.0 Nats JWT Library 0.2.0 Nats JWT Library 0.2.2 Nats JWT Library 0.2.4 Nats JWT Library 0.2.6 Nats JWT Library 0.2.8 Nats JWT Library 0.2.10 Nats JWT Library 0.2.12 Nats JWT Library 0.2.14 Nats JWT Library 0.2.16 Nats JWT Library 0.3.0 Nats JWT Library 0.3.2 Nats JWT Library 1.0.0 Nats JWT Library 1.0.1 Nats JWT Library 1.1.0 Nats JWT Library 1.1.1 Nats JWT Library 1.2.0 Nats JWT Library 1.2.1 Nats JWT Library 1.2.2 Nats JWT Library 2.0.0 Nats Nats Server 2.0.0 Nats Nats Server 2.0.2 Nats Nats Server 2.0.4 Nats Nats Server 2.1.0 Nats Nats Server 2.1.2 Nats Nats Server 2.1.4 Nats Nats Server 2.1.6 Nats Nats Server 2.1.7 Nats Nats Server 2.1.8 Nats Nats Server 2.1.9	38