Threats tagged 'ghsa-f233-77rj-r72p'

NextScan versions 1.1.0 through 1.2.0 contain hardcoded HTTP Basic Authentication credentials in the ns-admin component's AuthAgent and AuthExternal routers. This vulnerability allows unauthenticated attackers to access protected APIs. Exploiting this flaw, attackers can retrieve sensitive configuration data such as Redis passwords, etcd details, and server tokens by calling the /agent/config endpoint. Additionally, attackers can impersonate scan nodes by interacting with registration, heartbeat, and logging endpoints.