CVE Catalog

CVE-2023-34340

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.01%

58th percentile - higher than 58% of all known CVEs

Summary

Apache Accumulo 2.1.0 has an improper authentication vulnerability that may allow successful authentication with invalid credentials. Users are advised to upgrade to 2.1.1.

Risk Assessment

This vulnerability could lead to unauthorized access to the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to immediately upgrade to version 2.1.1 to mitigate this security flaw.

Original NVD description (English source)

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS