EUVD-2023-1824

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Improper Authentication vulnerability in Apache Accumulo 2.1.0 allows access with invalid credentials.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-34340	21 Jun 202312:26	–	circl
CNNVD	Apache Accumulo 授权问题漏洞	21 Jun 202300:00	–	cnnvd
CVE	CVE-2023-34340	21 Jun 202307:01	–	cve
Cvelist	CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials	21 Jun 202307:01	–	cvelist
Github Security Blog	Apache Accumulo Improper Authentication vulnerability	21 Jun 202309:30	–	github
NVD	CVE-2023-34340	21 Jun 202308:15	–	nvd
OSV	GHSA-HP5W-W29M-VG63 Apache Accumulo Improper Authentication vulnerability	21 Jun 202309:30	–	osv
Prion	Authentication flaw	21 Jun 202308:15	–	prion
Positive Technologies	PT-2023-24826 · Apache · Apache Accumulo	21 Jun 202300:00	–	ptsecurity
Veracode	Improper Authentication	29 Jun 202308:08	–	veracode

[
  {
    "enisaIdVendor": [
      {
        "id": "c3c04b62-c04f-3d28-9589-eb944f9cfda9",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9a8fb2bc-c6b2-39d7-a6c0-00133e84e22f",
        "product": {
          "name": "Apache Accumulo"
        },
        "product_version": "2.1.0 <2.1.1"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34340
github	www.github.com/apache/accumulo/issues/3427
github	www.github.com/apache/accumulo/issues/3433
github	www.github.com/apache/accumulo/pull/3440
github	www.github.com/apache/accumulo/commit/0f2389735fd32e0bbc93ecde5d8c814b275b21b5
accumulo	www.accumulo.apache.org/release/accumulo-2.1.1
github	www.github.com/apache/accumulo
lists	www.lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t
accumulo	www.accumulo.apache.org/release/accumulo-2.1.1/

03 Oct 2025 20:07Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.00109

SSVC