CVE-2024-27349

2024-04-2214:15:07

CWE-290

apache

web.nvd.nist.gov

apache hugegraph-server

authentication bypass

spoofing

vulnerability

nvd

upgrade

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Affected configurations

Vulners

Vulnrichment

Node

apachehugegraph-serverRange≤1.3.0

VendorProductVersionCPE
apachehugegraph-server*cpe:2.3:a:apache:hugegraph-server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	hugegraph-server	*	cpe:2.3:a:apache:hugegraph-server::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HugeGraph-Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.3.0",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "semver"
      }
    ]
  }
]