Aller au contenu
Se connecter
3.7 Faible

CVE-2026-40969 The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the…

Description

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks. Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring gRPC 1.0 1.0.0 → < 1.0.3 1.0.3

Autres CVE de Spring gRPC

Les 2 CVE de Spring gRPC →
CVE-2026-40968 When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC… 4.3 Moyenne
Suivre cette CVE