CVE-2024-36265
published 2024-06-12CVE-2024-36265: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from…
PriorityP359critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.74%
54.5th percentile
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST requests. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | submarine | >= 0.8.0 | — |
| apache_software_foundation | apache_submarine_server_core | 0.8.0 – * | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache Submarine Server Core 0.8.0 authorization
vuldb·2026-07-14·CVSS 9.8
CVE-2024-36265 [CRITICAL] Apache Submarine Server Core 0.8.0 authorization
A vulnerability categorized as critical has been discovered in Apache Submarine Server Core 0.8.0. The affected element is an unknown function. The manipulation results in incorrect authorization. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is cataloged as CVE-2024-36265. The attack must originate from the local network. There is no exploit available.
OSV
Apache Submarine Server Core Incorrect Authorization vulnerability
osv·2024-06-12
CVE-2024-36265 [CRITICAL] Apache Submarine Server Core Incorrect Authorization vulnerability
Apache Submarine Server Core Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: from 0.8.0.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
GHSA
Apache Submarine Server Core Incorrect Authorization vulnerability
ghsa·2024-06-12
CVE-2024-36265 [CRITICAL] CWE-863 Apache Submarine Server Core Incorrect Authorization vulnerability
Apache Submarine Server Core Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: from 0.8.0.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
OSV
CVE-2024-36265: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core
osv·2024-06-12
CVE-2024-36265 CVE-2024-36265: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: from 0.8.0.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-12
Published