3 matches found
CVE-2021-40865
An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution RCE. Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x...
CVE-2021-40865: Deserialization of Untrusted Data
An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution RCE. Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x...
PT-2021-5490
Name of the Vulnerable Software and Affected Versions Apache Storm versions 2.2.x prior to 2.2.1 Apache Storm versions 2.1.x prior to 2.1.1 Apache Storm versions 1.x prior to 1.2.4 Description An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor...