Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective
If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied.
Users that rely on authentication instead of making sure the Management API ports are only available to trusted users are recommended to upgrade to version 1.1.1, which fixes this issue.
Akka was affected by the same issue and has released the fix in version 1.6.1.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Apache Pekko Management
Vendor
Apache Software Foundation
Product
Apache Pekko Management
Platforms
Unknown
Default status
unaffected
Package
org.apache.pekko:pekko-management_2.12
Package collection
https://repo.maven.apache.org/maven2
Apache Pekko Management · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
maven
1.1.1
Unavailable
None listed
Apache Pekko Management
Vendor
Apache Software Foundation
Product
Apache Pekko Management
Platforms
Unknown
Default status
unaffected
Package
org.apache.pekko:pekko-management_2.13
Package collection
https://repo.maven.apache.org/maven2
Apache Pekko Management · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
maven
1.1.1
Unavailable
None listed
Apache Pekko Management
Vendor
Apache Software Foundation
Product
Apache Pekko Management
Platforms
Unknown
Default status
unaffected
Package
org.apache.pekko:pekko-management_3
Package collection
https://repo.maven.apache.org/maven2
Apache Pekko Management · Scoped product and version facts