IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-09 09:16

MODIFIED

2026-06-09 09:16

EPSS (Prob. Exploit)

0.51%

Top 57.1%

DATA SOURCES:

NVD 🔗 2026-06-09 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-29

> DESCRIPTION

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access restrictions on direct API endpoints, allowing authenticated users to discover and access unlisted questions, their answers, comments, and revision history. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-200

> CWE DETAILED DESCRIPTIONS

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor - The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

> GITHUB SECURITY ADVISORY

GHSA-85r2-pvg8-89r9 MODERATE

Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability

AFFECTED PACKAGES:

GO / github.com/apache/incubator-answer

< 1.7.2-0.20260509071350-11c80384f13a

Fixed in: 1.7.2-0.20260509071350-11c80384f13a

> HISTORIQUE DES MODIFICATIONS

Première apparition

09/06/2026 09:16

Source: NVD

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor - The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Total des modifications: 1 Dernière mise à jour: 4 months ago

> REFERENCES

https://lists.apache.org/thread/khxoft96sptr2kh0cpzgw7f6qwv0ltcf