CVE-2022-40308 If anonymous read enabled, it's possible to read the database file directly without logging in

Description

If anonymous read enabled, it's possible to read the database file directly without logging in.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Archiva 2.2	premières → 2.2.8	Pas de correctif indiqué

Autres CVE de Apache Archiva

Les 8 CVE de Apache Archiva →

CVE-2024-27138 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva Non notée CVE-2024-27139 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache… Non notée CVE-2024-27140 ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')… Non notée CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content 6.5 Moyenne