CVE-2019-0214 Vulnerability Details

  /     /     /  

CVE-2019-0214 Metadata Quick Info

CVE Published: 30/04/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: apache | Vendor: Apache | Product: Apache Archiva
Status : PUBLISHED

---

CVE-2019-0214 Description

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Arbitrary write/delete of files on the archiva server
Source: Apache

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).