CVE-2018-1331
10.07.2018, 17:29
In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a secure storm cluster in some cases could execute arbitrary code as a different user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | storm | 0.10.0 < 𝑥 ≤ 0.10.2 |
| apache | storm | 1.0.0 ≤ 𝑥 ≤ 1.0.6 |
| apache | storm | 1.1.0 < 𝑥 ≤ 1.1.2 |
| apache | storm | 1.2.0 ≤ 𝑥 ≤ 1.2.1 |
𝑥
= Vulnerable software versions
References