What is GHSA-hp5w-w29m-vg63?

GHSA-hp5w-w29m-vg63 is a security advisory published by GitHub Security Advisories with Critical severity. Apache Accumulo Improper Authentication vulnerability

Which CVE IDs does GHSA-hp5w-w29m-vg63 cover?

GHSA-hp5w-w29m-vg63 covers the following CVE IDs: CVE-2023-34340. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hp5w-w29m-vg63?

GHSA-hp5w-w29m-vg63 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-hp5w-w29m-vg63?

GHSA-hp5w-w29m-vg63 affects 1 product, including: maven/org.apache.accumulo:accumulo-shell:= 2.1.0.

GHSA-hp5w-w29m-vg63CriticalCVSS 9.8

Apache Accumulo Improper Authentication vulnerability

Vendor

GitHub Security Advisories

Published

June 21, 2023

Last Modified

October 9, 2024

🔗 CVE IDs covered (1)

CVE-2023-34340 →

📋 Description

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0.

Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

🎯 Affected products1

maven/org.apache.accumulo:accumulo-shell:= 2.1.0

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2023-34340
https://lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t
https://github.com/apache/accumulo/issues/3427
https://github.com/apache/accumulo/issues/3433
https://github.com/apache/accumulo/pull/3440
https://github.com/apache/accumulo/commit/0f2389735fd32e0bbc93ecde5d8c814b275b21b5
https://accumulo.apache.org/release/accumulo-2.1.1
https://github.com/advisories/GHSA-hp5w-w29m-vg63