CVE-2018-1332

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1332
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1332.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1332
Aliases
Published
2018-06-05T19:29:00Z
Modified
2024-09-03T02:05:04.248877Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.

References

Affected packages

Git / github.com/apache/storm

Affected ranges

Type
GIT
Repo
https://github.com/apache/storm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Last affected
Last affected

Affected versions

0.*

0.9.0
0.9.0-rc1
0.9.0-rc2
0.9.0-rc3
0.9.0.1

Other

PRE_SECURITY_MERGE

v0.*

v0.9.1-incubating
v0.9.2-incubating
v0.9.2-incubating-security
v0.9.3
v0.9.3-rc1

v1.*

v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.1.0
v1.1.1
v1.1.2
v1.2.0
v1.2.1