Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivated, allowing continued access to administrative APIs until the token expired. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HApache Answer
APPApache< 2.0.1
Powiązane podatności
Apache Answer — atak Pixel Flood przez nieograniczony upload pliku
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue ...
Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Ans...
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Ans...