CVE-2026-62764: Accumulo: güvenlik açığı

Açıklama (NVD)

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), leading to a denial of service. This issue affects Apache Accumulo 2.1.4 and 2.1.5. Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Özet bilgiler

Ürün

Apache Accumulo

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v4.0

5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Green

EPSS

%0,79 (yüzdelik 56)

CWE

CWE-274

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• accumulo.apache.org
• accumulo.apache.org
• github.com
• lists.apache.org
• www.openwall.com
• CWE-274