title: Apache ShenYu Admin Improper Privilege Management
description: Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
problem types: CWE-732 Incorrect Permission Assignment for Critical Resource
affected:
{
product: Apache ShenYu
vendor: Apache Software Foundation
versions:
status: affected, version: Apache ShenYu 2.4.2 and 2.4.3
}
metrics:
other: [
content: {'other': 'moderate'}
type: unknown
]
workarounds: Upgrade to Apache ShenYu 2.5.0 or apply patch https://github.com/apache/shenyu/pull/3658.