Non notée
CVE-2026-34905 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access restrictions on direct API endpoints, allowing authenticated users to discover and access unlisted questions, their answers, comments, and revision history. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Answer 2.0 | premières → 2.0.0 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Answer
Les 37 CVE de Apache Answer →
CVE-2026-90910
Missing authentication for critical function vulnerability in Apache Answer
Non notée
CVE-2026-86589
Incorrect implementation of authentication algorithm vulnerability in Apache Answer
Non notée
CVE-2026-79633
Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
Non notée
CVE-2026-79624
Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation
Non notée