Incorrect Authorization

2024-06-1305:08:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

incorrect authorization

invalidation

unauthorized access

software

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

org.apache.submarine, submarine-server-core is vulnerable to an Incorrect Authorization. The vulnerability is due to invalidation on authorization checks, allowing unauthorized users to potentially gain access to restricted functionalities.

CPENameOperatorVersion
submarine: server corele0.8.0
submarine: server corele0.8.0

CPE	Name	Operator	Version
	submarine: server core	le	0.8.0
	submarine: server core	le	0.8.0

References

www.openwall.com/lists/oss-security/2024/06/12/3

github.com/advisories/GHSA-6q97-8v3g-rpxw

lists.apache.org/thread/prckhhst19qxof064hsm8cccxtofvflz