CVE-2023-26150

Publication date

2023-10-03 05:00:02

Family

snyk

State

PUBLISHED

Description

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an active session.