Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-38361

Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to `NO_PERMISSION` when permission is expected. If the resource exists under *multiple* folders and the user has access to view more than a single folder, SpiceDB may report the user does not have access due to a failure in the exclusion dispatcher to request that *all* the folders in which the user is a member be returned. Permission is returned as `NO_PERMISSION` when `PERMISSION` is expected on the `CheckPermission` API. This issue has been addressed in version 1.33.1. All users are advised to upgrade. There are no known workarounds for this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.1%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2024-38361
  • Authzed » Spicedb » Version: 0.0.1
    cpe:2.3:a:authzed:spicedb:0.0.1
  • Authzed » Spicedb » Version: 0.0.2
    cpe:2.3:a:authzed:spicedb:0.0.2
  • Authzed » Spicedb » Version: 0.0.3
    cpe:2.3:a:authzed:spicedb:0.0.3
  • Authzed » Spicedb » Version: 1.0.0
    cpe:2.3:a:authzed:spicedb:1.0.0
  • Authzed » Spicedb » Version: 1.1.0
    cpe:2.3:a:authzed:spicedb:1.1.0
  • Authzed » Spicedb » Version: 1.10.0
    cpe:2.3:a:authzed:spicedb:1.10.0
  • Authzed » Spicedb » Version: 1.11.0
    cpe:2.3:a:authzed:spicedb:1.11.0
  • Authzed » Spicedb » Version: 1.12.0
    cpe:2.3:a:authzed:spicedb:1.12.0
  • Authzed » Spicedb » Version: 1.13.0
    cpe:2.3:a:authzed:spicedb:1.13.0
  • Authzed » Spicedb » Version: 1.14.0
    cpe:2.3:a:authzed:spicedb:1.14.0
  • Authzed » Spicedb » Version: 1.14.1
    cpe:2.3:a:authzed:spicedb:1.14.1
  • Authzed » Spicedb » Version: 1.15.0
    cpe:2.3:a:authzed:spicedb:1.15.0
  • Authzed » Spicedb » Version: 1.16.0
    cpe:2.3:a:authzed:spicedb:1.16.0
  • Authzed » Spicedb » Version: 1.16.1
    cpe:2.3:a:authzed:spicedb:1.16.1
  • Authzed » Spicedb » Version: 1.16.2
    cpe:2.3:a:authzed:spicedb:1.16.2
  • Authzed » Spicedb » Version: 1.17.0
    cpe:2.3:a:authzed:spicedb:1.17.0
  • Authzed » Spicedb » Version: 1.18.0
    cpe:2.3:a:authzed:spicedb:1.18.0
  • Authzed » Spicedb » Version: 1.18.1
    cpe:2.3:a:authzed:spicedb:1.18.1
  • Authzed » Spicedb » Version: 1.19.0
    cpe:2.3:a:authzed:spicedb:1.19.0
  • Authzed » Spicedb » Version: 1.19.1
    cpe:2.3:a:authzed:spicedb:1.19.1
  • Authzed » Spicedb » Version: 1.2.0
    cpe:2.3:a:authzed:spicedb:1.2.0
  • Authzed » Spicedb » Version: 1.20.0
    cpe:2.3:a:authzed:spicedb:1.20.0
  • Authzed » Spicedb » Version: 1.21.0
    cpe:2.3:a:authzed:spicedb:1.21.0
  • Authzed » Spicedb » Version: 1.22.0
    cpe:2.3:a:authzed:spicedb:1.22.0
  • Authzed » Spicedb » Version: 1.22.1
    cpe:2.3:a:authzed:spicedb:1.22.1
  • Authzed » Spicedb » Version: 1.22.2
    cpe:2.3:a:authzed:spicedb:1.22.2
  • Authzed » Spicedb » Version: 1.23.0
    cpe:2.3:a:authzed:spicedb:1.23.0
  • Authzed » Spicedb » Version: 1.23.1
    cpe:2.3:a:authzed:spicedb:1.23.1
  • Authzed » Spicedb » Version: 1.24.0
    cpe:2.3:a:authzed:spicedb:1.24.0
  • Authzed » Spicedb » Version: 1.25.0
    cpe:2.3:a:authzed:spicedb:1.25.0
  • Authzed » Spicedb » Version: 1.26.0
    cpe:2.3:a:authzed:spicedb:1.26.0
  • Authzed » Spicedb » Version: 1.27.0
    cpe:2.3:a:authzed:spicedb:1.27.0
  • Authzed » Spicedb » Version: 1.28.0
    cpe:2.3:a:authzed:spicedb:1.28.0
  • Authzed » Spicedb » Version: 1.29.0
    cpe:2.3:a:authzed:spicedb:1.29.0
  • Authzed » Spicedb » Version: 1.29.1
    cpe:2.3:a:authzed:spicedb:1.29.1
  • Authzed » Spicedb » Version: 1.29.2
    cpe:2.3:a:authzed:spicedb:1.29.2
  • Authzed » Spicedb » Version: 1.29.3
    cpe:2.3:a:authzed:spicedb:1.29.3
  • Authzed » Spicedb » Version: 1.29.5
    cpe:2.3:a:authzed:spicedb:1.29.5
  • Authzed » Spicedb » Version: 1.3.0
    cpe:2.3:a:authzed:spicedb:1.3.0
  • Authzed » Spicedb » Version: 1.30.0
    cpe:2.3:a:authzed:spicedb:1.30.0
  • Authzed » Spicedb » Version: 1.30.1
    cpe:2.3:a:authzed:spicedb:1.30.1
  • Authzed » Spicedb » Version: 1.31.0
    cpe:2.3:a:authzed:spicedb:1.31.0
  • Authzed » Spicedb » Version: 1.32.0
    cpe:2.3:a:authzed:spicedb:1.32.0
  • Authzed » Spicedb » Version: 1.33.0
    cpe:2.3:a:authzed:spicedb:1.33.0
  • Authzed » Spicedb » Version: 1.4.0
    cpe:2.3:a:authzed:spicedb:1.4.0
  • Authzed » Spicedb » Version: 1.5.0
    cpe:2.3:a:authzed:spicedb:1.5.0
  • Authzed » Spicedb » Version: 1.6.0
    cpe:2.3:a:authzed:spicedb:1.6.0
  • Authzed » Spicedb » Version: 1.7.0
    cpe:2.3:a:authzed:spicedb:1.7.0
  • Authzed » Spicedb » Version: 1.7.1
    cpe:2.3:a:authzed:spicedb:1.7.1
  • Authzed » Spicedb » Version: 1.8.0
    cpe:2.3:a:authzed:spicedb:1.8.0
  • Authzed » Spicedb » Version: 1.9.0
    cpe:2.3:a:authzed:spicedb:1.9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved