CVE-2024-27182

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27182
In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h Mailing List Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*
History

16 Aug 2024, 16:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.9
CPE cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*
References () https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h - () https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h - Mailing List, Vendor Advisory
First Time Apache
Apache linkis

02 Aug 2024, 12:59

Type Values Removed Values Added
Summary
  • (es) En Apache Linkis &lt;= 1.5.0, la eliminación arbitraria de archivos en los servicios de administración básicos puede provocar que un usuario con una cuenta de administrador elimine cualquier archivo al que tenga acceso el usuario del sistema Linkis. Se recomienda a los usuarios que actualicen a la versión 1.6.0, que soluciona este problema.

02 Aug 2024, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-02 10:16

Updated : 2024-08-16 16:55

NVD link : CVE-2024-27182

Mitre link : CVE-2024-27182

CVE.ORG link : CVE-2024-27182

JSON object : View

Products Affected

apache

  • linkis
CWE
CWE-552

Files or Directories Accessible to External Parties