Major Description
Prefixed ACLs with a single character are not matched correctly against resource names. ALLOW rule with single character prefix doesn't grant access to any resource and DENY rule with single character prefix doesn't deny access to any resource since the prefix is not matched correctly.
This is not an exploitable security vulnerability since only authenticated users with authorization to create ACLs can create the prefixed ACLs.
Attachments
Issue Links
- links to