Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Unrestricted access to Apache HugeGraph - Vulnerability Database

Unrestricted access to Apache HugeGraph

Description

HugeGraph is a convenient, efficient, and adaptable graph database compatible with the Apache TinkerPop3 framework and the Gremlin query language

Invicti determined that it was possible to access HugeGraph API without authentication.

Remediation

Enable authentication for HugeGraph

References

Built-in User Authentication and Authorization Configuration and Usage in HugeGraph

Related Vulnerabilities

Joomla! Core Security Bypass High
Common tags: Configuration Privilege Escalation
Unrestricted access to MLflow Medium
Common tags: Configuration Privilege Escalation
ASP.NET WCF metadata enabled for behavior Medium
Common tags: Configuration
Custom Error Pages Are Not Configured in WEB-INF/web.xml Medium
Common tags: Configuration
Spring Boot Misconfiguration: Datasource credentials stored in the properties file Medium
Common tags: Configuration

Severity

Critical

Classification

CWE-200
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Configuration
Privilege Escalation