CVE-2022-29405

Apache Archiva Arbitrary user password reset vulnerability

published May 25, 2022

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01724 · 77.3th percentile
Published
2022-05-25T07:15Z
EPSS history
Timeline
  • 25 MAY 07:15Z
    Apache Archiva Arbitrary user password reset vulnerability
    cvelistv5