Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-42468
HistoryOct 26, 2022 - 4:15 p.m.

Remote code execution

2022-10-2616:15:00
PRIOn knowledge base
www.prio-n.com
7
apache flume
remote code execution
vulnerability
jms source
configuration
rce
jndi
java protocol
nvd

9.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.

CPENameOperatorVersion
flumege1.4.0
flumele1.10.1

9.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

Related for PRION:CVE-2022-42468