Lucene search
Veracode Vulnerability DatabaseVERACODE:48466HistoryAug 13, 2024 - 8:51 a.m.
Improper Access Control
2024-08-1308:51:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
apache dolphinscheduler
improper access control
vulnerability
validation
access controls
authenticated users
resource files
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
High
EPSS
0.044
Percentile
92.6%
Apache DolphinScheduler is vulnerable to Improper Access Control. The vulnerability is due to there is no proper validation on access controls that allowing authenticated users to illegally access additional resource files.
Related
cvelist
cvelist
osv
osv
Apache DolphinScheduler: Resource File Read And Write Vulnerability
2024-08-12 15:30:49
CVE-2024-30188
2024-08-12 13:38:19
vulnrichment
vulnrichment
cve
cve
CVE-2024-30188
2024-08-12 13:38:19
github
github
Apache DolphinScheduler: Resource File Read And Write Vulnerability
2024-08-12 15:30:49
nvd
nvd
CVE-2024-30188
2024-08-12 13:38:19
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
High
EPSS
0.044
Percentile
92.6%
Related for VERACODE:48466