CVE-2018-1332

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@apache.org

Published

2018-06-05

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Storm (Apache)
• Apache Storm (Apache Software Foundation)

References

• http://www.securityfocus.com/bid/104399
• https://lists.apache.org/thread.html/50f1d6a7af27f49d2e498a9ab2975685302cd8ca47000b7c38f339a4%40%3Cdev.storm.apache.org…