#VU86999 Improper access control in Apache Archiva - CVE-2024-27138

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU86999

#VU86999 Improper access control in Apache Archiva - CVE-2024-27138

Published: March 4, 2024


Vulnerability identifier: #VU86999
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2024-27138
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Apache Archiva
Software vendor:
Apache Foundation

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass implemented security restrictions and register an account when user registration is disabled.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links