Approved changes feed: RSS · Atom

cpe:2.3:a:yugabytedb:anywhere:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYugabytedb (e8027f32-0d6b-55b6-838a-0581aa7f0b3b)
ProductAnywhere (498c1221-61cb-56c0-8912-f6c6a3750f10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4640 vulnerable 2026-06-08 06:16:14.049512 Set Logging Level Without Authentication
MEDIUM (6.5)
The controller responsible for setting the logging level does not include any authorization checks to ensure the user is authenticated. This can be seen by noting that it extends Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3
Published: 2023-08-30T16:42:45.242Z
Updated: 2024-10-01T18:31:56.957Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.