What’s Vulnerable › Vulnerabilities

CVE-2022-39219: Bifrost users using basic authntication can bypass write permission limit

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-26 · updated 2026-06-17
• Weakness: CWE-287

Description

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests when they are normally forbidden from doing so. Version 1.8.7-release contains a patch. There are currently no known workarounds.

Affected products

• brokercap Bifrost: before 1.8.7 — fixed in 1.8.7

How to fix

Upgrade to a fixed version: brokercap Bifrost 1.8.7. Check the vendor advisory for mitigations.

References

• https://github.com/brokercap/Bifrost/issues/200
• https://github.com/brokercap/Bifrost/releases/tag/v1.8.7-release
• https://github.com/brokercap/Bifrost/security/advisories/GHSA-p6fh-xc6r-g5hw
• https://github.com/brokercap/Bifrost/issues/200
• https://github.com/brokercap/Bifrost/releases/tag/v1.8.7-release
• https://github.com/brokercap/Bifrost/security/advisories/GHSA-p6fh-xc6r-g5hw

Get alerted when CVE-2022-39219 or the next vulnerability affects your stack