CVE-2024-26578

Katalog CVE

CVSS 5.9 · Medium EPSS 0,90%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada apache answer. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly submit multiple registrations using scripts, it can result in the creation of multiple user accounts simultaneously with the same name. Users are recommended to upgrade to version [1.2.5], which fixes the issue.

Rincian

Terbit di NVD

22 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/ko0ksnznt2484lxt0zts2ygr82ldkhcb mailing list · advisory vendor
• http://www.openwall.com/lists/oss-security/2024/02/22/3 mailing list · advisory pihak ketiga