title: Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files
description: If anonymous read enabled, it's possible to read the database file directly without logging in.
problem types: Arbitrary file read vulnerability
affected:
{
vendor: Apache Software Foundation
product: Apache Archiva
versions:
version: Apache Archiva, status: affected, lessThanOrEqual: 2.2.8, versionType: custom
}