Vulnerability in Apache Flink Due to JMX Reporter Configuration
CVE-2020-1960

4.7MEDIUM

Key Information:

Vendor: Apache
Status: Apache Flink
Vendor: CVE Published:; 14 May 2020

What is CVE-2020-1960?

A vulnerability in Apache Flink allows an attacker with local access to exploit a poorly configured JMXReporter. When JMX is enabled and a specific port is set up, the attacker can craft a request to redirect the JMXRMI registry to their own system, enabling them to intercept JMX connections. This exploitation grants the attacker access to sensitive data, including credentials and data transferred through the JMX interface.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Apache Flink Apache Flink 1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0