cbcvebase.

Apache Software Foundation Apache Aurora vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_aurora.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-27905P2CRITICALCVSS 9.1≥ 0.5.0, ≤ *2024-02-27
CVE-2024-27905 [CRITICAL] CWE-200 CVE-2024-27905: ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerabi ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in o
nvd
Apache Software Foundation Apache Aurora vulnerabilities | cvebase