Description

The Kong Gateway provides API for accessing various information and configuring it. Acunetix determined that it was possible to access this API without authentication.

Remediation

Restrict access to the Kong Gateway API interface

Related Vulnerabilities

Symfony Profiler open

WordPress Plugin Advanced Access Manager Multiple Vulnerabilities (6.6.1)

RoR Database Configuration File Detected

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.14)

GoCD information disclosure (CVE-2021-43287)

Severity

High

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Tags

Configuration