EUVD-2021-2014

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Authentication bypass in Apache Zeppelin enables user impersonation in versions 0.9.0 and earlier.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-13929	2 Sep 202120:37	–	circl
CNNVD	Apache Zeppelin 授权问题漏洞	2 Sep 202100:00	–	cnnvd
CNVD	Apache Zeppelin Authentication Bypass Vulnerability	4 Sep 202100:00	–	cnvd
CVE	CVE-2020-13929	2 Sep 202100:00	–	cve
Cvelist	CVE-2020-13929 Notebook permissions bypass	2 Sep 202100:00	–	cvelist
Tenable Nessus	GLSA-202311-04 : Zeppelin: Multiple Vulnerabilities	24 Nov 202300:00	–	nessus
Github Security Blog	Authentication bypass in Apache Zeppelin	7 Sep 202122:56	–	github
Gentoo Linux	Zeppelin: Multiple Vulnerabilities	24 Nov 202300:00	–	gentoo
NVD	CVE-2020-13929	2 Sep 202117:15	–	nvd
OSV	GHSA-87P2-CVHQ-Q4MV Authentication bypass in Apache Zeppelin	7 Sep 202122:56	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "39e4d01c-512f-329d-96e6-48212da6b14d",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2a64405f-67a1-3ee8-9315-342aa7edcbb1",
        "product": {
          "name": "Apache Zeppelin"
        },
        "product_version": "Apache Zeppelin ≤0.9.0"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-13929
github	www.github.com/apache/zeppelin
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028%40%3Cusers.zeppelin.apache.org%3E
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028@%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/r768800925d6407a6a87ccae0ec98776b7bda50c0e3ed3d0130dad028@%3Cusers.zeppelin.apache.org%3E
lists	www.lists.apache.org/thread.html/r99529e175a7c1c9a26bd41a02802c8af7aa97319fe561874627eb999%40%3Cusers.zeppelin.apache.org%3E
lists	www.lists.apache.org/thread.html/r99529e175a7c1c9a26bd41a02802c8af7aa97319fe561874627eb999@%3Cusers.zeppelin.apache.org%3E
security	www.security.gentoo.org/glsa/202311-04
openwall	www.openwall.com/lists/oss-security/2021/09/02/2

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.00124