Описание
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.
This issue affects Apache StreamPipes: through 0.95.1.
Users are recommended to upgrade to version 0.97.0 which fixes the issue.
Ссылки
- Mailing ListVendor Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.97.0 (исключая)
cpe:2.3:a:apache:streampipes:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00145
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 6.5
github
11 месяцев назад
Apache StreamPipes has improper privilege management in a REST interface
EPSS
Процентиль: 35%
0.00145
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-269