Alibaba · Nacos · CVE-2020-19676
**Name of the Vulnerable Software and Affected Versions**
Nacos version 1.1.4
**Description**
The issue is related to incorrect access control. It allows an environment to be set up locally to access the service details interface. Through the service list interface, other Nacos service names can be accessed. Furthermore, service details can be accessed even when not logged in.
**Recommendations**
For Nacos version 1.1.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.