Spnego Http Authentication Module

spnego_http_authentication_module

Vendor: Spnego Http Authentication Module Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-21335

1Spnego Http Authentication Module Project

1Spnego Http Authentication Module

Jun 17, 2026

Mar 8, 2021

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of spnego-http-auth-nginx-module. As a workaround, one may disable basic authentication.Show less