Lucene search
Veracode Vulnerability DatabaseVERACODE:26734HistorySep 11, 2020 - 5:08 a.m.
Authorization Bypass
2020-09-1105:08:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
38.2%
dolphinscheduler-api is vulnerable to authorization bypass. An authenticated user under any tenant is able to override the passwords of other users via the API interface /dolphinscheduler/users/update.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolphinscheduler-api | le | 1.3.1 |
Related
osv
osv
CVE-2020-13922
2021-01-11 10:15:13
PYSEC-2021-876
2021-01-11 10:15:00
Incorrect Default Permissions in Apache DolphinScheduler
2022-02-09 22:26:32
prion
prion
Default credentials
2021-01-11 10:15:00
cvelist
cvelist
CVE-2020-13922 Apache DolphinScheduler (incubating) Permission vulnerability
2021-01-11 09:40:19
cve
cve
CVE-2020-13922
2021-01-11 10:15:13
nvd
nvd
CVE-2020-13922
2021-01-11 10:15:13
github
github
Incorrect Default Permissions in Apache DolphinScheduler
2022-02-09 22:26:32