Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xfq9-m5c5-8p4q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

EPSS

Процентиль: 39%
0.00176
Низкий

Связанные уязвимости

CVSS3: 6.5
nvd
около 6 лет назад

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

EPSS

Процентиль: 39%
0.00176
Низкий