8.2Yüksek
Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime
Apache Software Foundation Apache Camel Platform HTTP Main; Red Hat Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14; Red Hat OpenShift Serverless; Red Hat Red Hat build of Apache Camel 4 for Quarkus 3
When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenti…