CVE-2020-13937

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13937
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13937.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-13937
Aliases
Published
2020-10-19T21:15:12.623Z
Modified
2026-04-10T04:22:27.432982Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.

References

Affected packages

Git / github.com/apache/kylin

Affected ranges

Type
GIT
Repo
https://github.com/apache/kylin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
375fd807c281d8c5deff0620747c806be2019782
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
562dd173aaf6b398be8e053f896755b3afe8137f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
850c0a6a3b9296d26121f9986701bb191921b1bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1179ee72d0a2a2c629a649751ef43ae9e82dc87a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
928cc1628c546efe7ec348c467f5d26607c8d7e6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8247ffc2d8a8a20381575389ffb3834d784ad4ce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b450cc52f976ddafba7c6625d2440670af94332b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5606c32e236b4443ca81eb15a575c46b87e3868c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
158f8768debe99746c66e516e4596707a476d7d6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
24e2452309a450ec4ef62339b003343eabe23016
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e519d859e217fbfadd534313376e532d2c647fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8737bc1f555a2789a67462c8f8420b6ab3be97ce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
270cfe68ecc94c66141b29e2ccf20b9ec25e23dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c507ae29fa64bc7234efd6a002dcfe990969ad35
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0d5f85b0a40c301134122de927204a0d17ad65fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
97505df25a1c9223fe650b00343722a7cee78ffb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73d42edec5f6492b3d3ffc222c26dce4bdfe7263
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ddd5f8ecd4157b8f889b047e421dd9cfae7e1142
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c75242a9b55fd57a3a58d92a2dfa9f21cfe4eebc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8872e28de06b05b11a423f32ff62a5d00ed84813
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c11034fbff25eb298617980f48b300314af471d4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d523862f29920292ab195b31c231f2f57f18594
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
818c21cc9c2a995a58d85497a8649ebcf11a975c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
57090efe4bdc079ccfde4f9c8729d69ba3a90624
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2e056748bf61ef89d421735bb7be41f4266d7b94
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a285f9a5b84affc36c5466ce5a1b2fcdb4348b37
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-alpha2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-alpha"
        }
    ]
}

Affected versions

kylin-2.*
kylin-2.0.0
kylin-2.1.0
kylin-2.2.0
kylin-2.3.0
kylin-2.3.1
kylin-2.3.2
kylin-2.4.0
kylin-2.4.1
kylin-2.5.0
kylin-2.5.1
kylin-2.5.2
kylin-2.6.0
kylin-2.6.1
kylin-2.6.2
kylin-2.6.3
kylin-2.6.4
kylin-2.6.5
kylin-2.6.6
kylin-3.*
kylin-3.0.0
kylin-3.0.0-alpha
kylin-3.0.0-alpha2
kylin-3.0.0-beta
kylin-3.0.1
kylin-3.0.2
kylin-3.1.0
kylin-4.*
kylin-4.0.0-alpha
v0.*
v0.6.1
v0.6.1_mysql_auth

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13937.json"