Apache Flink directory traversal attack: reading remote files through the REST API
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 9.1epss 98%
da publicação à arma1 dias
Publicada no NVD5 de jan.
1ª PoC+1d
metasploit5 de jan.
CISA KEV+1234d
probabilidade de exploração
98%top 1% das CVEs
exploração observada
simCISA + VulnCheck
26 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2024-06-13
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Produtos afetados
Apache Software Foundation · Apache FlinkPoCs públicas encontradas — 26✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/49398githubgithub.com/MrCl0wnLab/SimplesApachePathTraversal★ 61githubgithub.com/B1anda0/CVE-2020-17519★ 48githubgithub.com/murataydemir/CVE-2020-17519★ 8githubgithub.com/dolevf/apache-flink-directory-traversal.nse★ 3githubgithub.com/yaunsky/CVE-2020-17519-Apache-Flink★ 1githubgithub.com/QmF0c3UK/CVE-2020-17519★ 1githubgithub.com/givemefivw/CVE-2020-17519★ 1githubgithub.com/dev-team-12x/CVE-2020-17519★ 0githubgithub.com/radbsie/CVE-2020-17519-Exp★ 0githubgithub.com/zhangweijie11/CVE-2020-17519★ 0githubgithub.com/GazettEl/CVE-2020-17519★ 0githubgithub.com/shoucheng3/apache__flink_CVE-2020-17519_1-11-2★ 0githubgithub.com/Osyanina/westone-CVE-2020-17519-scanner★ 0vulncheckvulncheck.com/xdb/c096ce6f775bnão verificadovulncheckvulncheck.com/xdb/259c72303ba8não verificadovulncheckvulncheck.com/xdb/02f7b73ab684não verificadovulncheckvulncheck.com/xdb/5060de9f4f15não verificadovulncheckvulncheck.com/xdb/50a45f679975não verificadovulncheckvulncheck.com/xdb/9be1f64fbcd2não verificadovulncheckvulncheck.com/xdb/1620553c643anão verificadocve_referencepacketstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlnão verificadovulncheckvulncheck.com/xdb/1b1d6d820b0cnão verificadovulncheckvulncheck.com/xdb/7c9fe2b962fdnão verificadovulncheckvulncheck.com/xdb/7fe03bf0f0a6não verificadovulncheckvulncheck.com/xdb/a0b10abc1d63não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlhttps://lists.apache.org/thread.html/r0a433be10676f4fe97ca423d08f914e0ead341c901216f292d2bbe83%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3Ehttps://lists.apache.org/thread.html/r229167538863518738e02f4c1c5a8bb34c1d45dadcc97adf6676b0c1%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r26fcdd4fe288323006253437ebc4dd6fdfadfb5e93465a0e4f68420d%40%3Cuser-zh.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r28f17e564950d663e68cc6fe75756012dda62ac623766bb9bc5e7034%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r2fc60b30557e4a537c2a6293023049bd1c49fd92b518309aa85a0398%40%3Cissues.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r4e1b72bfa789ea5bc20b8afe56119200ed25bdab0eb80d664fa5bfe2%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cannounce.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cdev.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r6843202556a6d0bce9607ebc02e303f68fc88e9038235598bde3b50d%40%3Cuser.flink.apache.org%3Ehttps://lists.apache.org/thread.html/r88b55f3ebf1f8f4e1cc61f030252aaef4b77060b56557a243abb92a1%40%3Cissues.flink.apache.org%3E