CVE Details

PRISMA-2022-0227

Last Update

7/31/2024

NIST CVE Summary

github.com/emicklei/go-restful/v3 module prior to v3.10.0 is vulnerable to Authentication Bypass by Primary Weakness. There is an inconsistency in how go-restful parses URL paths. This inconsistency could lead to several security check bypass in a complex system.

Our Official Summary

The CVE reported in vsphere-csi 3.2.0, and Kubernetes 1.28.11. Govulncheck reports it as non-impacting.

CVE Severity

N/A

Status

Ongoing