CVE-2019-0214: Medium severity apache archiva vulnerability
Published Apr 30, 2019
·Updated
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Affected Software
2 affected components
Apache Archiva>=1.2<=1.3.9
Apache Archiva>=2.0.0<=2.2.3
Event History
Apr 30, 2019
CVE Published
via MITRE·09:48 PM
Data Sourced
via MITRE·09:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is Apache Archiva?
Apache Archiva is a repository manager for Maven artifacts.
2
What is the vulnerability ID for Apache Archiva?
The vulnerability ID for Apache Archiva is CVE-2019-0214.
3
What is the severity of CVE-2019-0214?
The severity of CVE-2019-0214 is medium with a CVSS score of 6.5.
4
How does CVE-2019-0214 affect Apache Archiva?
CVE-2019-0214 allows attackers to write files to the Archiva server at arbitrary locations and overwrite existing files.
5
How can I fix CVE-2019-0214?
To fix CVE-2019-0214, it is recommended to upgrade to Apache Archiva version 2.2.4 or later, which addresses the vulnerability.