← voltar
CVE-2024-29120

Apache StreamPark: Information leakage vulnerability

CVSS 5.9 MEDIUMEPSS 0.3%CWE-212CWE-922
In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc.  Mitigation: all users should upgrade to 2.1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →