Apache Accumulo Improper Authentication vulnerability

심각 9.8CVE-2023-34340 · GHSA-hp5w-w29m-vg63 · Published 21/06/2023 · updated 17/06/2026

요약

CVE-2023-34340은(는) org.apache.accumulo:accumulo-shell, accumulo (apache)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.4%, 전체 취약점의 73.1%보다 높음.
조치: 2.1.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.apache.accumulo:accumulo-shell Maven	`≥ 2.1.0, < 2.1.1`	`2.1.1`
accumulo apache	`= 2.1.0`	No fix yet

Description

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0.

Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

NVD description

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

References

nvd.nist.gov/vuln/detail/CVE-2023-34340 · ADVISORY
apache/accumulo · WEB
apache/accumulo · WEB
apache/accumulo#3440 · WEB
apache/accumulo commit 0f23897 · WEB
accumulo.apache.org/release/accumulo-2.1.1 · WEB
apache/accumulo · PACKAGE
lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t · WEB
accumulo.apache.org/release/accumulo-2.1.1 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.accumulo:accumulo-shell

Maven

≥ 2.1.0, < 2.1.1

2.1.1

accumulo

apache

= 2.1.0

No fix yet

Description

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0.

Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

NVD description