38 matches found
Improper Authorization
Apache Accumulo is vulnerable to Improper Authorization. The vulnerability is due to insufficient privilege enforcement on remote shutdown commands, allowing authenticated low-privileged users to shut down system components and cause a denial of service...
org.apache.accumulo:accumulo-compaction-coordinator (>=2.1.4, <=2.1.5), org.apache.accumulo:accumulo-compactor (>=2.1.4, <=2.1.5) +6 more potentially affected by CVE-2026-62764 via org.apache.accumulo:accumulo-server-base (>=2.1.4, <=2.1.5)
org.apache.accumulo:accumulo-server-base MAVEN version =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.5 Source cves: CVE-2026-62764 Source advisory: SNYK:JAVA-ORGAPACHEACCUMULO-18016321...
CVE-2026-62764
CVE-2026-62764 affects Apache Accumulo 2.1.4 and 2.1.5. An authenticated, low-privilege user without system permissions can remotely issue a command to gracefully shutdown several components (e.g., compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), causing a denial of ...
EUVD-2026-45154
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
CVE-2026-62764
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
CVE-2026-62764
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
org.apache.accumulo:accumulo-compaction-coordinator (>=2.1.4, <=2.1.5), org.apache.accumulo:accumulo-compactor (>=2.1.4, <=2.1.5) +6 more potentially affected by CVE-2026-62764 via org.apache.accumulo:accumulo-server-base (>=2.1.4, <=2.1.5)
org.apache.accumulo:accumulo-server-base MAVEN version =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.5 Source cves: CVE-2026-62764 Source advisory: MEND:CVE-2026-62764...
CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
PT-2026-60732
Name of the Vulnerable Software and Affected Versions Apache Accumulo versions 2.1.4 through 2.1.5 Description An authenticated user with low privileges and no system permissions can issue a remote command to gracefully shut down system components, including the compaction-coordinator, compactor,...
CVE-2026-62764: Improper Handling of Insufficient Privileges
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...
EUVD-2023-1824
Malicious code in bioql PyPI...
org.apache.accumulo:accumulo-test (2.1.0) potentially affected by CVE-2023-34340 via org.apache.accumulo:accumulo-shell (2.1.0)
org.apache.accumulo:accumulo-shell MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.accumulo:accumulo-shell and may be impacted: - org.apache.accumulo:accumulo-test 2.1.0 Source cves: CVE-2023-34340 Source advisory:...
Apache Accumulo Improper Authentication vulnerability
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
CVE-2023-34340
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
Authentication flaw
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...