Remote Code Execution (RCE)

🗓️ 11 Jul 2018 02:52:53Reported by Veracode Vulnerability DatabaseType

Apache Storm remote code execution vulnerabilit

Reporter	Title	Published	Views	Family All 10
CNVD	Apache Storm Arbitrary Code Execution Vulnerability (CNVD-2018-15544)	12 Jul 201800:00	–	cnvd
CVE	CVE-2018-1331	10 Jul 201817:00	–	cve
Cvelist	CVE-2018-1331	10 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-0648	7 Oct 202500:30	–	euvd
Github Security Blog	Code execution in org.apache.storm:storm-core	17 Oct 201819:48	–	github
NVD	CVE-2018-1331	10 Jul 201817:29	–	nvd
OSV	GHSA-P8JX-X2VW-WM33 Code execution in org.apache.storm:storm-core	17 Oct 201819:48	–	osv
Prion	Code injection	10 Jul 201817:29	–	prion
vulnersOsv	cn.howardliu:gear-es (>=1.0.0-RELEASE <=1.0.1-RELEASE), com.accelerate-experience:storm-metrics-statsd (>=1.0.0 <=1.0.1) +97 more potentially affected by CVE-2018-1331 via org.apache.storm:storm-core (>=0.10.0-beta <=1.1.2)	17 Oct 201819:48	–	vulnersosv
vulnersOsv	org.apache.storm:flux-core (>=1.2.0 <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0 <=1.2.1) +14 more potentially affected by CVE-2018-1331 via org.apache.storm:storm-core (>=1.2.0 <=1.2.1)	17 Oct 201819:48	–	vulnersosv

Vulners

Node

apache storm-coreRange1.2.0–1.2.1java

apache storm-coreRange1.1.0–1.1.2java

apache storm-coreRange0.10.0–0.10.2java

apache storm-coreRange1.0.0–1.0.6java

Source	Link
openwall	www.openwall.com/lists/oss-security/2018/07/10/4
securitytracker	www.securitytracker.com/id/1041273
securityfocus	www.securityfocus.com/bid/104732
github	www.github.com/apache/storm/commit/f61e5daf299d6c37c7ad65744d02556c94a16a4b
github	www.github.com/apache/storm/commit/efad4cca2d7d461f5f8c08a0d7b51fabeb82d0af
storm	www.storm.apache.org/2018/06/04/storm113-released.html
storm	www.storm.apache.org/2018/06/04/storm122-released.html

03 Oct 2019 07:27Current

9.2High risk

Vulners AI Score9.2

CVSS 26.5

CVSS 38.8

EPSS0.05109