CVE-2015-3188: Undefined Security Weakness

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors...

Apache Storm code execution

Code execution on the web server...

[CVE-2015-3188] Apache Storm remote code execution vulnerability

CVE-2015-3188: Apache Storm remote code execution vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Storm 0.10.0-beta Description: The UI daemon in Apache Storm 0.10.0-beta allows remote users to run arbitrary code as the user running the web serve...

Apache Storm User Interface Arbitrary Code Execution Vulnerability

Apache Storm is a free, open source distributed real-time computing system. Apache Storm has a security vulnerability that allows a remote user to connect to the UI backend program and execute arbitrary code on the system. Using Kerberos authentication for users, remote users can spoof arbitrary...

PT-2015-3343

Name of the Vulnerable Software and Affected Versions Apache Storm version 0.10.0 Description The issue is related to the UI daemon in Apache Storm, which has insufficient access controls. This allows remote attackers to execute arbitrary code. With Kerberos authentication, this could potentially...