{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.9.0"}],"component":"io.antmedia:ant-media-server","cve_ids":["CVE-2024-3462"],"ecosystem":"Maven","epss":0.00479,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g95v-3pj6-j433","id":"tcs_01M5N8XVS6YVV5N8BPKNBPZR9Y","modified_at":"2024-11-07T19:22:23.349872Z","published_at":"2024-05-14T18:30:52Z","references":["https://osv.dev/vulnerability/GHSA-g95v-3pj6-j433","https://nvd.nist.gov/vuln/detail/CVE-2024-3462","https://antmedia.io","https://cert.pl/en/posts/2024/05/CVE-2024-3462","https://cert.pl/posts/2024/05/CVE-2024-3462","https://github.com/ant-media/Ant-Media-Server"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g95v-3pj6-j433","url":"https://osv.dev/vulnerability/GHSA-g95v-3pj6-j433"}],"summary":"Ant Media Server does not properly authorize non-administrative API calls"}