5.3

CVE-2020-13937

Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Kylin Version 2.0.0
Apache ≫ Kylin Version 2.1.0
Apache ≫ Kylin Version 2.2.0
Apache ≫ Kylin Version 2.3.0
Apache ≫ Kylin Version 2.3.1
Apache ≫ Kylin Version 2.3.2
Apache ≫ Kylin Version 2.4.0
Apache ≫ Kylin Version 2.4.1
Apache ≫ Kylin Version 2.5.0
Apache ≫ Kylin Version 2.5.1
Apache ≫ Kylin Version 2.5.2
Apache ≫ Kylin Version 2.6.0
Apache ≫ Kylin Version 2.6.1
Apache ≫ Kylin Version 2.6.2
Apache ≫ Kylin Version 2.6.3
Apache ≫ Kylin Version 2.6.4
Apache ≫ Kylin Version 2.6.5
Apache ≫ Kylin Version 2.6.6
Apache ≫ Kylin Version 3.0.0 Update -
Apache ≫ Kylin Version 3.0.0 Update alpha
Apache ≫ Kylin Version 3.0.0 Update alpha2
Apache ≫ Kylin Version 3.0.0 Update beta
Apache ≫ Kylin Version 3.0.1
Apache ≫ Kylin Version 3.0.2
Apache ≫ Kylin Version 3.1.0
Apache ≫ Kylin Version 4.0.0 Update alpha
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 78.33% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

https://lists.apache.org/thread.html/rc592e0dcee5a2615f1d9522af30ef1822c1f863d5e05e7da9d1e57f4%40%3Cuser.kylin.apache.org%3E
Vendor Advisory
Mailing List
Release Notes