[<prev] [next>] [day] [month] [year] [list]
Message-ID: <5a9446f4-8267-e703-421b-79b300b93ad6@apache.org>
Date: Tue, 20 Jun 2023 19:33:44 +0000
From: Christopher Tubbs <ctubbsii@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2023-34340: Apache Accumulo: Accumulo 2.1.0 may incorrectly
validate cached credentials
Severity: critical
Affected versions:
- Apache Accumulo 2.1.0 before 2.1.1
Description:
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo.
This issue affects Apache Accumulo: 2.1.0.
Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.
References:
https://accumulo.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-34340
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
