CVE-2016-2171

The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add…

published April 11, 2016

CVSS
—
EPSS
43%
Percentile
98.7
In the wild
Unconfirmed
What it is

The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the REST API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.42673 · 98.7th percentile
Published
2016-04-11T14:00Z
EPSS history
Timeline
  • 11 APR 14:00Z
    The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add…
    cvelistv5