title: Apache Archiva Arbitrary user password reset vulnerability
description: In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
problem types: Apache Archiva Arbitrary user password reset vulnerability
affected:
{
product: Apache Archiva
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 2.2.7, status: affected, version: 2.2, versionType: custom
}