Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55396
HistoryJun 27, 2023 - 12:00 a.m.

Apache StreamPipes Elevation of Privilege Vulnerability

2023-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
apache streampipes
elevation of privilege
vulnerability
rest interface
administrator access

0.001 Low

EPSS

Percentile

42.3%

Apache StreamPipes is a self-service (industrial) IoT toolkit from the Apache (USA) Foundation that enables non-technical users to connect, analyze and explore IIoT data streams. Apache StreamPipes suffers from an elevation of privilege vulnerability that is caused by failing to properly restrict the REST interface to administrator-only access. An attacker could exploit this vulnerability to gain elevated privileges on the system.

CPENameOperatorVersion
apache streampipes >=0.69.0,le0.91.0

0.001 Low

EPSS

Percentile

42.3%