Apache DolphinScheduler exposes files without authentication
CVE-2022-26884

6.5MEDIUM

Key Information:

Vendor: Apache
Status: Apache Dolphinscheduler
Vendor: CVE Published:; 28 October 2022

🔔 Create Apache Vulnerability Alert

What is CVE-2022-26884?

Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Apache DolphinScheduler Apache DolphinScheduler < 2.0.6

References

https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2...

http://www.openwall.com/lists/oss-security/2022/10/28/2

mailing-list

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Oct 28, 2022
Vulnerability Reserved
Mar 11, 2022

JSON

Apache