title: Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
description: Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo.
This issue affects Apache Accumulo: 2.1.0.
Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1.
problem types: CWE-287 Improper Authentication
affected:
{
defaultStatus: unaffected
product: Apache Accumulo
vendor: Apache Software Foundation
versions:
lessThan: 2.1.1, status: affected, version: 2.1.0, versionType: semver
}
metrics:
other: [
content: {'text': 'critical'}
type: Textual description of severity
]