← CVE Intelligence

CVE-2022-40308

Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files PUBLISHED

Description (CNA)

If anonymous read enabled, it's possible to read the database file directly without logging in.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Archivaaffected Apache Archiva through 2.2.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.