511 matches found
CVE-2024-12347 Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewmswar/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper...
CVE-2024-12347 Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewmswar/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper...
CVE-2024-12347
Summary: CVE-2024-12347 affects Guangzhou Huayi Intelligent Technology Jeewms 1.0.0 and earlier, specifically the Druid Monitoring Interface file /jeewms_war/webpage/system/druid/index.html, where improper authorization can be exploited remotely. The vulnerability context across connected sources...
PT-2024-17556 · Guangzhou Huayi Intelligent Technology · Jeewms
Name of the Vulnerable Software and Affected Versions: Guangzhou Huayi Intelligent Technology Jeewms version 1.0.0 Description: A critical issue affects the Druid Monitoring Interface component, specifically the file /jeewms war/webpage/system/druid/index.html, leading to improper authorization...
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi, logstash, druid, strimzi-kafka-operator...
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: apache-nifi, strimzi-kafka-operator, druid, thingsboard, logstash...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi, logstash, druid, strimzi-kafka-operator...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: apache-nifi, strimzi-kafka-operator, druid, thingsboard, logstash...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: solr, spark, kafka, zookeeper, zookeeper-fips, apache-tika, confluent-kafka, cloudwatch-exporter, confluent-kafka-jre-bcfips, celeborn, strimzi-kafka-operator, druid, apache-nifi, cassandra-reaper, spark-fips...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: solr, spark, kafka, zookeeper, zookeeper-fips, apache-tika, confluent-kafka, cloudwatch-exporter, confluent-kafka-jre-bcfips, celeborn, strimzi-kafka-operator, druid, apache-nifi, cassandra-reaper, spark-fips...
Padding Oracle Attack
org.apache.druid.extensions : druid-pac4j and org.apache.druid : druid-processing is vulnerable to Padding Oracle Attack. The vulnerability is caused due to improper handling of cryptographic padding in the druid-pac4j extension, which could allow an attacker to manipulate a pac4j session cookie...
GHSA-P72W-R6FV-6G5H vulnerabilities
Vulnerabilities for packages: druid...
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j session cookie. This issue affects Apache Druid versions 0.18.0 through 30.0.0. Since the druid-pac4j extension is optional and disabled by default, Druid installations not usin...
Apache Druid: Users can provide MySQL JDBC properties not on allow list
Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...
GHSA-P72W-R6FV-6G5H vulnerabilities
Vulnerabilities for packages: druid...
GHSA-JH66-3545-VPM7 Apache Druid: Users can provide MySQL JDBC properties not on allow list
Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...
GHSA-P72W-R6FV-6G5H druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j session cookie. This issue affects Apache Druid versions 0.18.0 through 30.0.0. Since the druid-pac4j extension is optional and disabled by default, Druid installations not usin...
CVE-2024-45384
Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j session cookie. This issue affects Apache Druid versions 0.18.0 through 30.0.0. Since the druid-pac4j extension is optional and disabled by default, Druid installations not usin...
CVE-2024-45537
Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...