Beveiligingsadvies

CVE-2017-9799

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-08-09 21:00:00

Laatst bijgewerkt 2024-09-17 02:06:16

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.

← Alle CVE's bekijken Bekijk op cve.org ↗