CVE-2020-13929

🗓️ 02 Sep 2021 00:00:00Reported by apacheType

Authentication bypass vulnerability in Apache Zeppelin, allows an attacker to act as another use

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-13929	2 Sep 202120:37	–	circl
CNNVD	Apache Zeppelin 授权问题漏洞	2 Sep 202100:00	–	cnnvd
CNVD	Apache Zeppelin Authentication Bypass Vulnerability	4 Sep 202100:00	–	cnvd
Cvelist	CVE-2020-13929 Notebook permissions bypass	2 Sep 202100:00	–	cvelist
EUVD	EUVD-2021-2014	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-202311-04 : Zeppelin: Multiple Vulnerabilities	24 Nov 202300:00	–	nessus
Github Security Blog	Authentication bypass in Apache Zeppelin	7 Sep 202122:56	–	github
Gentoo Linux	Zeppelin: Multiple Vulnerabilities	24 Nov 202300:00	–	gentoo
NVD	CVE-2020-13929	2 Sep 202117:15	–	nvd
OSV	GHSA-87P2-CVHQ-Q4MV Authentication bypass in Apache Zeppelin	7 Sep 202122:56	–	osv

NVD

Vulners

Node

apache zeppelinRange≤0.9.0

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Zeppelin",
    "versions": [
      {
        "version": "Apache Zeppelin",
        "status": "affected",
        "lessThanOrEqual": "0.9.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028%40%3Cannounce.apache.org%3E
security	www.security.gentoo.org/glsa/202311-04
openwall	www.openwall.com/lists/oss-security/2021/09/02/2
lists	www.lists.apache.org/thread.html/r99529e175a7c1c9a26bd41a02802c8af7aa97319fe561874627eb999%40%3Cusers.zeppelin.apache.org%3E
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028%40%3Cusers.zeppelin.apache.org%3E

21 Nov 2024 05:02Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

EPSS0.00124