github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension
1 known vulnerabilities.
1 result · Feed
-
High 8.1
azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay
azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint…