Apache Archiva CVE-2019-0214 Arbitrary File Write Vulnerability

Bugtraq ID:	108124
Class:	Input Validation Error
CVE:	CVE-2019-0214
Remote:	Yes
Local:	No
Published:	Apr 30 2019 12:00AM
Updated:	Apr 30 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Apache Archiva 2.2.3 Apache Archiva 2.2.2 Apache Archiva 2.0.1 Apache Archiva 1.3.9 Apache Archiva 1.3.4 Apache Archiva 1.3.3 Apache Archiva 1.3.2 Apache Archiva 1.3.1 Apache Archiva 1.2.2 Apache Archiva 1.2.1 Apache Archiva 1.1.4 Apache Archiva 1.1.2 Apache Archiva 1.1.1 Apache Archiva 1.0.4 Apache Archiva 1.0.3 Apache Archiva 1.0.2 Apache Archiva 2.2.1 Apache Archiva 2.0 Apache Archiva 1.3.8 Apache Archiva 1.3.6 Apache Archiva 1.3.5 Apache Archiva 1.3 Apache Archiva 1.2 Apache Archiva 1.1.3 Apache Archiva 1.1 Apache Archiva 1.0.1 Apache Archiva 1.0
Not Vulnerable:	Apache Archiva 2.2.4

Apache Archiva CVE-2019-0214 Arbitrary File Write Vulnerability

Apache Archiva is prone to a security vulnerability that allows remote attackers to write arbitrary files.

Successful exploits may allow an attacker to write or delete arbitrary files to the affected system. This may aid in further attacks.

Versions prior to Apache Archiva 2.2.4 are vulnerable; other versions may also be affected.

Apache Archiva CVE-2019-0214 Arbitrary File Write Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.