PT-2024-26941

CVE-2024-36265

·

Published

2024-06-12

·

Updated

2024-09-26

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache Submarine Server Core versions 0.8.0 and later
Description The issue is related to an Incorrect Authorization vulnerability in Apache Submarine Server Core. This vulnerability only affects products that are no longer supported by the maintainer. Users are recommended to find an alternative or restrict access to the instance to trusted users.
Recommendations As a temporary workaround, consider restricting access to the instance to trusted users until an alternative solution is found. Find an alternative to Apache Submarine Server Core, as the project is retired and no fix will be released.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-6Q97-8V3G-RPXW
PYSEC-2024-98
Found an issue in the description? Have something to add? Feel free to write us 👾