Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Mesos

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2018-8023

    Moderate severity vulnerability that affects org.apache.mesos:mesos

    Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT imp…

    Apache Software Foundation Apache Mesos org.apache.mesos:mesos Maven