CVE-2017-9799
CVE-2017-9799
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 4.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 ago 2017Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.
Produtos afetados
Apache Software Foundation · Apache StormQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →