GCVE - cpe:2.3:a:apache:accumulo:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:accumulo:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Accumulo (`6cdf9dc2-cdfb-5808-a41d-e105a74dbb70`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:apache/accumulo`	purl2cpe	2026-06-01 10:14:30.456445
`pkg:github/apache/accumulo`	purl2cpe	2026-06-01 10:14:30.456448
`pkg:maven/org.apache.accumulo/accumulo-core`	purl2cpe	2026-06-01 10:14:30.456451

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-34340`	vulnerable	2026-06-08 06:06:25.080427	Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1. Published: 2023-06-21T07:01:48.171Z Updated: 2024-10-09T14:46:37.243Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/syy6jftvy9l6tlhn33o0rzwhh4rd0z4t https://accumulo.apache.org/release/accumulo-2.1.1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17533`	vulnerable	2026-06-08 05:20:56.778437	Apache Accumulo Improper Handling of Insufficient Permissions Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and 'canPerformSystemActions' security functions are not checked in some instances, therefore allowing an authenticated user with insufficient permissions to perform the following actions: flushing a table, shutting down Accumulo or an individual tablet server, and setting or removing system-wide Accumulo configuration properties. Published: 2020-12-29T11:30:13.000Z Updated: 2024-08-04T14:00:48.650Z Open on db.gcve.eu Reference links https://lists.apache.org/thread.html/rf8c1a787b6951d3dacb9ec58f0bf1633790c91f54ff10c6f8ff9d8ed%40%3Cuser.accumulo.apache.org%3E https://lists.apache.org/thread.html/rf8c1a787b6951d3dacb9ec58f0bf1633790c91f54ff10c6f8ff9d8ed%40%3Cannounce.apache.org%3E http://www.openwall.com/lists/oss-security/2020/12/29/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.