CVE-2020-17519

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/typ0h03zyfrzjqlnb7plh64df1g2383d; https://nvd.nist.gov/vuln/detail/CVE-2020-17519

Remediation deadline: June 13, 2024

Description

Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.

Timeline

Published:May 23rd, 2024 12:00 AM

Last modified:May 23rd, 2024 12:00 AM

Added to KEV:May 23rd, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Apache

Products

Flink

Weaknesses (CWE)

CWE-552

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute