CLEANSTART-2026-RM64149

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-RM64149.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-RM64149

Upstream

CVE-2025-58457

Published

2026-10-30T11:03:37Z

Modified

2026-10-31T01:02:23Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions

Details

Security vulnerability affects the wso2is package. Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions.

References

Affected packages

CleanStart / wso2is

Package

Name: wso2is
Purl: pkg:apk/cleanstart/wso2is

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.1.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-RM64149.json"

CleanStart / wso2is

Package

Name: wso2is
Purl: pkg:apk/cleanstart/wso2is

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.0.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-RM64149.json"