CVE-2023-22495

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token (JWT), an attacker could compromise another instance of Izanami. This issue has been patched in version 1.11.0.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-288 CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Jan 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-224969.8Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a st CVE-2023-224979.1Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically genera CVE-2023-224997.5Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive pe CVE-2023-22506.7A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration CVE-2023-225007.5GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorizatio CVE-2023-225019.1An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate ano CVE-2023-225035.3Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and label CVE-2023-225046.5Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to u CVE-2023-225058.8This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Cent CVE-2023-225068.8This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo CVE-2023-225088.8This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Cent CVE-2023-22517.5Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.