CVE-2024-23685 FOLIO mod-remote-storage Hard Coded Credentials

2024-01-1921:07:13

VulnCheck

www.cve.org

cve-2024-23685

hard coded credentials

unauthorized access

mod remote storage

security vulnerability

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.5%

JSON

Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.

CNA Affected

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.folio:mod-remote-storage",
    "versions": [
      {
        "lessThan": "1.7.2",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      },
      {
        "lessThan": "2.0.3",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "maven"
      }
    ]
  }
]