Lucene search
+L

26 matches found

CVE
CVE
added 2021/01/05 11:40 a.m.312 views

CVE-2020-17519

CVE-2020-17519 is an Apache Flink directory traversal vulnerability that permits reading arbitrary files on the JobManager host via the REST interface. The flaw stems from a change introduced in Flink 1.11.0 (affecting 1.11.0, 1.11.1, and 1.11.2) and is limited to files accessible by the JobManag...

9.1CVSS7.3AI score0.97856EPSS
SaveIn wildExploits14References17Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/05 11:40 a.m.28 views

CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API

A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...

6.4AI score0.97856EPSS
SaveExploits14References16
ATTACKERKB
ATTACKERKB
added 2021/01/05 12:00 a.m.21 views

CVE-2020-17519

A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...

9.1CVSS7.3AI score0.97856EPSS
SaveIn wildExploits14References32
Positive Technologies
Positive Technologies
added 2021/01/05 12:00 a.m.14 views

PT-2021-10097 · Apache · Apache Flink

Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.11.0 through 1.11.2 Description: A change introduced in Apache Flink allows attackers to read any file on the local filesystem of the JobManager through the REST interface. Access is restricted to files accessible by t...

9.4CVSS7.3AI score0.97856EPSS
SaveExploits14References65
Metasploit
Metasploit
added 2021/01/05 12:00 a.m.56 views

Apache Flink JobManager Traversal

This module exploits an unauthenticated directory traversal vulnerability in Apache Flink versions 1.11.0 use auxiliary/scanner/http/apache/flinkjobmanagertraversal msf undefinedflinkjobmanagertraversal show actions ...actions... msf undefinedflinkjobmanagertraversal set ACTION msf...

9.1CVSS7.7AI score0.97856EPSS
SaveExploits14
Fedora
Fedora
added 2017/07/04 1:55 a.m.20 views

[SECURITY] Fedora 25 Update: globus-gram-job-manager-14.36-1.fc25

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

3.7AI score
SaveExploits0
Rows per page
Query Builder