Описание
Improper Authentication in Apache Zeppelin
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.
Пакеты
Наименование
org.apache.zeppelin:zeppelin
maven
Затронутые версииВерсия исправления
< 0.8.0
0.8.0
Связанные уязвимости
CVSS3: 8.8
nvd
почти 7 лет назад
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.