Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck() function in file internal/sbi/processor/access_token.go bypasses all scope validation when the attacker uses a crafted targetNF value. This allows attackers to obtain an access token with any arbitrary scope.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
nrf 安全漏洞
Vulnerability Description
nrf是free5GC开源的一个网络存储库功能模块。 nrf 1.4.0版本存在安全漏洞，该漏洞源于AccessTokenScopeCheck函数在使用特制targetNF值时绕过所有范围验证，可能导致获取任意范围的访问令牌。
CVSS Information
N/A
Vulnerability Type
N/A