Package · Maven

org.apache.knox:gateway-provider-identity-assertion-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.8

CVE-2017-5646

Apache Knox allows impersonation of users

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this …

Apache Software Foundation Apache Knox org.apache.knox:gateway-provider-identity-assertion-common Maven

May 26, 2017