org.apache.kylin:kylin-tool-assembly (2.3.2) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.3.2)

org.apache.kylin:kylin-server-base MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.3.2 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.1.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.1.0)

org.apache.kylin:kylin-server-base MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.1.0 Source cves: CVE-2022-24697 Source advisory:...

org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=1.2.0), org.apache.ranger:ranger-kylin-plugin-shim (>=1.1.0, <=1.2.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.3.0)

org.apache.kylin:kylin-server-base MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =1.1.0, =1.1.0, =1.2.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-tool-assembly (2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.4.0)

org.apache.kylin:kylin-server-base MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.4.0 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.6.6) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.6)

org.apache.kylin:kylin-server-base MAVEN version 2.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.6 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.6.3) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.3)

org.apache.kylin:kylin-server-base MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.3 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.5.0), org.apache.ranger:ranger-kylin-plugin (2.0.0) +1 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.5.0)

org.apache.kylin:kylin-server-base MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.5.0 - org.apache.ranger:ranger-kylin-plugin 2.0.0 -...

org.apache.kylin:kylin-tool-assembly (2.6.2) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.2)

org.apache.kylin:kylin-server-base MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.2 Source cves: CVE-2022-24697 Source advisory:...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (3.1.3)

org.apache.kylin:kylin-server-base MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0, =2.4.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-spark-test (4.0.0-alpha), org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=4.0.0-alpha) +2 more potentially affected by CVE-2022-44621 via org.apache.kylin:kylin-server-base (>=2.1.0, <=4.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.4.0 Source cves: CVE-2022-44621 Source advisory: OSV:GHSA-W9RV-XMF7-X3GH...

org.apache.kylin:kylin-spark-test (4.0.0-alpha), org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=4.0.0-alpha) +2 more potentially affected by CVE-2022-44621 via org.apache.kylin:kylin-server-base (>=2.1.0, <=4.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.4.0 Source cves: CVE-2022-44621 Source advisory: GHSA-W9RV-XMF7-X3GH...

org.apache.kylin:kylin-spark-test (4.0.0-alpha), org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=4.0.0-alpha) +2 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (>=2.1.0, <=4.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.4.0 Source cves: CVE-2022-24697 Source advisory: MEND:CVE-2022-24697...

Privilege Escalation

kylin-server-base is vulnerable to privilege escalation. The vulnerability exists in the setParam function in QueryService.java, allowing an attacker to load any class through the Class.forName function...

org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=2.6.4), org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=2.2.0) +1 more potentially affected by CVE-2020-1937 via org.apache.kylin:kylin-server-base (>=2.1.0, <=2.6.4)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.2.0 Source cves: CVE-2020-1937 Source advisory: GHSA-7HMH-8GWV-MFVQ...

org.apache.kylin:kylin-tool-assembly (3.0.0) potentially affected by CVE-2020-1937 via org.apache.kylin:kylin-server-base (3.0.0)

org.apache.kylin:kylin-server-base MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 3.0.0 Source cves: CVE-2020-1937 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.2.0) potentially affected by CVE-2020-13926 via org.apache.kylin:kylin-server-base (2.2.0)

org.apache.kylin:kylin-server-base MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.2.0 Source cves: CVE-2020-13926 Source advisory:...

org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=1.2.0), org.apache.ranger:ranger-kylin-plugin-shim (>=1.1.0, <=1.2.0) potentially affected by CVE-2020-13926 via org.apache.kylin:kylin-server-base (2.3.0)

org.apache.kylin:kylin-server-base MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =1.1.0, =1.1.0, =1.2.0 Source cves: CVE-2020-13926...

org.apache.kylin:kylin-tool-assembly (2.4.0) potentially affected by CVE-2020-13926 via org.apache.kylin:kylin-server-base (2.4.0)

org.apache.kylin:kylin-server-base MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.4.0 Source cves: CVE-2020-13926 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.5.0), org.apache.ranger:ranger-kylin-plugin (2.0.0) +1 more potentially affected by CVE-2020-13926 via org.apache.kylin:kylin-server-base (2.5.0)

org.apache.kylin:kylin-server-base MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.5.0 - org.apache.ranger:ranger-kylin-plugin 2.0.0 -...

org.apache.kylin:kylin-tool-assembly (2.6.4), org.apache.ranger:ranger-kylin-plugin (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2020-13926 via org.apache.kylin:kylin-server-base (2.6.4)

org.apache.kylin:kylin-server-base MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.4 - org.apache.ranger:ranger-kylin-plugin =2.1.0,...