com.github.intel-hadoop:gearpump-experiments-storm_2.11 (>=0.3.4, <=0.4.1), com.github.ptgoetz:flux (0.1.0) +3 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.9.3)

org.apache.storm:storm-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - com.github.intel-hadoop:gearpump-experiments-storm2.11 =0.3.4, =0.1.3, =0.0.13, =0.0.14 Source cves:...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.storm:flux (0.10.1), org.apache.storm:flux-core (0.10.1) +8 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.1)

org.apache.storm:storm-core MAVEN version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux 0.10.1 - org.apache.storm:flux-core 0.10.1 - org.apache.storm:flux-examples 0.10.1...

org.apache.storm:apache-storm-bin (0.10.2), org.apache.storm:apache-storm-source (0.10.2) +10 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.2)

org.apache.storm:storm-core MAVEN version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:apache-storm-bin 0.10.2 - org.apache.storm:apache-storm-source 0.10.2 -...

com.accelerate-experience:storm-metrics-statsd (>=1.0.0, <=1.0.1), com.accelerate-experience:storm-rabbitmq (1.0.0) +85 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=1.0.0, <=1.1.2)

org.apache.storm:storm-core MAVEN version =1.0.0, =1.0.0, =0.1.0, =1.0, =1.0, =1.0, =1.3, =1.0, =1.0, =1.0, =1.0.0, =1.0.4 - com.github.ptgoetz:storm-jms 1.0.2 - com.github.ptgoetz:storm-signals 1.0.3 and more Source cves: CVE-2018-1332 Source advisory: OSV:GHSA-Q35P-CHC6-7X57...

com.accelerate-experience:storm-metrics-statsd (>=1.0.0, <=1.0.1), com.accelerate-experience:storm-rabbitmq (1.0.0) +85 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=1.0.0, <=1.1.2)

org.apache.storm:storm-core MAVEN version =1.0.0, =1.0.0, =0.1.0, =1.0, =1.0, =1.0, =1.3, =1.0, =1.0, =1.0, =1.0.0, =1.0.4 - com.github.ptgoetz:storm-jms 1.0.2 - com.github.ptgoetz:storm-signals 1.0.3 and more Source cves: CVE-2018-1332 Source advisory: GHSA-Q35P-CHC6-7X57...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-1332 Source advisory: OSV:GHSA-Q35P-CHC6-7X57...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-1332 Source advisory: GHSA-Q35P-CHC6-7X57...

CVE-2018-1332

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons...

CVE-2018-1332

Summary: CVE-2018-1332 affects Apache Storm up to v1.0.6, v1.2.1, and v1.1.2 (and earlier), enabling user impersonation when communicating with certain Storm Daemons. The connected sources reiterate that the vulnerability allows impersonation but do not provide a concrete fix, patch version, or m...

cn.howardliu:gear-es (>=1.0.0-release, <=1.0.1-release), com.accelerate-experience:storm-metrics-statsd (>=1.0.0, <=1.0.1) +97 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=0.9.3, <=1.1.2)

org.apache.storm:storm-core MAVEN version =0.9.3, =1.0.0-release, =1.0.0, =0.1.0, =0.9, =0.9, =0.9, =1.3, =0.9, =0.9, =0.9, =1.0.0, =0.3.4, =0.4.1 and more Source cves: CVE-2018-1332 Source advisory: MEND:CVE-2018-1332...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-1332 Source advisory: MEND:CVE-2018-1332...