CVE-2026-68482

Full vulnerability record from the local CVENow database.

Description

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-10-19 10:16:48.510000

Last modified

2026-10-19 20:47:17.723000

View original CVE JSON

{
  "id": "CVE-2026-68482",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-19T10:16:48.510",
  "lastModified": "2026-10-19T20:47:17.723",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nAn unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.\n\n\nUsers are recommended to upgrade to version 2.0.3, which fixes the issue."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Answer",
          "defaultStatus": "unaffected",
          "packageURL": "pkg:software-id/apache.org/answer",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "2.0.2",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread/m2tbvdv12hmr9sw6ft53rjnww8hqzds0",
      "source": "[email protected]"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/10/16/26",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}