Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34340

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

Published

2023-06-21T08:15:10.740

Last Modified

2024-11-21T08:07:02.830

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apache	accumulo	2.1.0	Yes

References

https://accumulo.apache.org/release/accumulo-2.1.1/ Release Notes ([email protected])
https://lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t Mailing List, Vendor Advisory ([email protected])
https://accumulo.apache.org/release/accumulo-2.1.1/ Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)