GCVE-110-MAGEIA-2022-225

Advisory Published

Vulnetix · Advisory published June 13, 2022

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature. (CVE-2022-24450)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	nats-server	2.1.9-1.1.mga8 (unaffected), 0 (affected)	—

Aliases

CVE-2022-24450

References

Updated nats-server packages fix security vulnerability

advisory

Updated nats-server packages fix security vulnerability

issue

Updated nats-server packages fix security vulnerability

issue

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON