Package · Maven

org.apache.calcite:calcite-splunk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.9

CVE-2020-13955

Missing Authentication for Critical Function in Apache Calcite

HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connect with Druid and Splunk so information leakage may happen wh…

org.apache.calcite:calcite-core org.apache.calcite:calcite-druid org.apache.calcite:calcite-splunk Maven

Oct 9, 2020