Insufficiently Protected Credentials

Overview org.apache.storm:storm-server is a distributed realtime computation system. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the storm.zookeeper.topology.auth.payload configuration parameter. An attacker can gain unauthorized access to sensitiv...