NATS nats-server in versions 2.2.0 through 2.9.22, and 2.10.0 through 2.10.1 has an authentication bypass. An implicit "$G" user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account.
security vulnerability : CVE-2023-47090
NATS nats-server in versions 2.2.0 through 2.9.22, and 2.10.0 through 2.10.1 has an authentication bypass. An implicit "$G" user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account.