March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – SUPERNOVA Malware Linked with SolarWinds and Pulse Secure Exploits
April 23, 2021
Rewterz Threat Advisory – Trend Micro HouseCall for Home Networks Vulnerabilities
April 26, 2021
Rewterz Threat Alert – SUPERNOVA Malware Linked with SolarWinds and Pulse Secure Exploits
April 23, 2021
Rewterz Threat Advisory – Trend Micro HouseCall for Home Networks Vulnerabilities
April 26, 2021
Severity
High
Analysis Summary
CVE-2021-26291
By sending a specially-crafted request, an attacker could exploit this vulnerability to take over the repository or to insert themselves into a position to pretend to be that repository. Apache Maven could allow a remote attacker to bypass security restrictions, caused by the use of http (non-SSL) repository references by default.
Impact
Security Bypass
Affected Vendors
Apache
Affected Products
Apache Maven 3.8.0
Remediation
Upgrade to the latest version of Apache Maven (3.8.1 or later), available from the Apache Web site.