CVE-2026-79633

Published: Oct 19, 2026Modified: Oct 19, 2026Deferred

Description

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Related CWEs

CWE-202

Exposure of Sensitive Information Through Data Queries

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

References (2)

https://lists.apache.org/thread/m301yrn0fwgr957q8qzfzt8tpjklocv9

Source: security@apache.org

http://www.openwall.com/lists/oss-security/2026/10/16/32

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.