CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in ekaterir Cache Sniper for Nginx snipe-nginx-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cache Sniper for Nginx: from n/a through <= 1.0.4.2.
Explanation of Vulnerability in Simple Terms
Cache Sniper for Nginx versions up to 1.0.4.2 lack proper authorization checks, allowing authenticated users to modify cache settings they should not have access to. An attacker with low-privilege credentials can alter cache behavior without proper permission validation. The vulnerability affects the integrity of cached content but does not expose sensitive data or cause service disruption.
What an attacker can do
Modify cache settings or behavior without proper authorization.
Potential impact on your site
Cached content integrity may be compromised by unauthorized users with low-level access.
Conditions required to exploit
Attacker must have a low-privilege user account on the Nginx instance.
Key dates
External resources
Related vulnerabilities
