Lucene search

China National Vulnerability DatabaseCNVD-2024-17932

HistoryApr 11, 2024 - 12:00 a.m.

Apache Zeppelin Security Bypass Vulnerability

2024-04-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache zeppelin

full bypass vulnerability

authentication bypass

attacker

apache foundation

open source

web-based

data analysis

collaborative documentation

annotations

cnvd

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.0%

JSON

Apache Zeppelin is a Web-based open source laptop application from the Apache (USA) Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from a full bypass vulnerability that can be exploited by an attacker to bypass authentication by replacing existing annotations in Apache Zeppelin.

CPENameOperatorVersion
apache zeppelin >=0.10.1，lt0.11.0

CPE	Name	Operator	Version
	apache zeppelin >=0.10.1，	lt	0.11.0