Threats tagged 'ghsa-9qvj-rpj8-v5c8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-46548Org.apache.pekko:pekko management 2.12: Pekko Management may not properly apply authenticator when Basic Medium6.52025-06-03GCVE DatabaseCVE-2025-46548 A vulnerability in org.apache.pekko:pekko-management_2.12 versions prior to 1.1.1 causes Basic Authentication to not be properly applied when enabled via the Java DSL. This flaw allows unauthorized access if users rely solely on authentication without restricting Management API ports to trusted users. The issue is fixed in version 1.1.1. A similar issue affected Akka and was fixed in version 1.6.1. Report on CVE-2025-46548 Vulnerability CWE-287 #ghsa-9qvj-rpj8-v5c8 #maven	GCVE Database	2025-06-03

Page 1 of 1