CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

2023-06-2107:01:48

CWE-287

apache

www.cve.org

cve-2023-34340

apache accumulo

improper authentication

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.9%

JSON

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo.
This issue affects Apache Accumulo: 2.1.0.

Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Accumulo",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.1.1",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "semver"
      }
    ]
  }
]