Lucene search

K
cvelistRedhatCVELIST:CVE-2016-2171
HistoryApr 11, 2016 - 2:00 p.m.

CVE-2016-2171

2016-04-1114:00:00
redhat
www.cve.org

7.7 High

AI Score

Confidence

High

0.531 Medium

EPSS

Percentile

97.6%

The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the REST API.

7.7 High

AI Score

Confidence

High

0.531 Medium

EPSS

Percentile

97.6%

Related for CVELIST:CVE-2016-2171