Authorization Credential Leak in Streampark
CVE-2024-29120
Currently unrated 🤨
Summary
In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc. Mitigation: all users should upgrade to 2.1.4
Affected Version(s)
Apache StreamPark < 2.1.4
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
L0ne1y