Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SonarSource SonarQube 授权问题漏洞
Vulnerability Description
SonarSource SonarQube是瑞士SonarSource公司的一套开源的代码质量管理系统。 SonarQube 8.4.2.36762版本存在安全漏洞，该漏洞使外部攻击者可以通过SonarScanner实现身份验证绕过，通过 the /api/ce/submit可以创建和覆盖公共和私有项目。
CVSS Information
N/A
Vulnerability Type
N/A