PatchTheCVEauthguard vulnerabilities and fixes
Recent CVEs affecting authguard, with upgrade or downgrade steps. 1 tracked.
authguard has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-12-27. Highest priority: CVE-2021-45890 (score 59/100).
- CVE-2021-45890 CRITICAL 9.8 UPGRADE basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier.
FAQ
How do I fix authguard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is authguard being exploited right now?
None of the tracked authguard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which authguard CVE should I patch first?
CVE-2021-45890 currently ranks highest (59/100): basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier..