~ / search / GHSA-2894-qcqf-g23g

GHSA-2894-qcqf-g23g

asyncua Improper Authentication vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-26150

Packages

EcosystemPackageAffectedFixed in
PyPI asyncua < 0.9.96 0.9.96

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an active session.

References

External links from the advisory. They lead to third-party sites.