Moderate severity vulnerability that affects org.apache.storm:storm-core

2018-10-1719:48:18

Google

osv.dev

0.001 Low

EPSS

Percentile

28.2%

JSON

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.

CPENameOperatorVersion
org.apache.storm:storm-coreeq1.1.1
org.apache.storm:storm-coreeq1.2.0
org.apache.storm:storm-coreeq1.0.3
org.apache.storm:storm-coreeq1.1.0
org.apache.storm:storm-coreeq0.10.0
org.apache.storm:storm-coreeq0.10.2
org.apache.storm:storm-coreeq1.2.1
org.apache.storm:storm-coreeq1.1.2
org.apache.storm:storm-coreeq0.9.1-incubating
org.apache.storm:storm-coreeq0.9.6

Name	Operator	Version
org.apache.storm:storm-core	eq	1.1.1
org.apache.storm:storm-core	eq	1.2.0
org.apache.storm:storm-core	eq	1.0.3
org.apache.storm:storm-core	eq	1.1.0
org.apache.storm:storm-core	eq	0.10.0
org.apache.storm:storm-core	eq	0.10.2
org.apache.storm:storm-core	eq	1.2.1
org.apache.storm:storm-core	eq	1.1.2
org.apache.storm:storm-core	eq	0.9.1-incubating
org.apache.storm:storm-core	eq	0.9.6