Beveiligingsadvies

CVE-2026-8338

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-29 16:38:40

Laatst bijgewerkt 2026-07-29 18:06:23

Toegewezen door BlackDuck

CVSS-score 9.2

Status PUBLISHED

Beschrijving

A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authentication and authorization controls on certain API endpoints to access data within Coverity.

← Alle CVE's bekijken Bekijk op cve.org ↗