Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Storm Logviewer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-82437

    Apache Storm Logviewer: Log Access Controls Not Enforced by Logviewer

    Description The Logviewer offers `logs.users` and `logs.groups` so operators can control who may read log content. For daemon logs those settings were not applied: the access decision combined the "this is a daemon log" flag with the authorizer result in a wa…

    Apache Software Foundation Apache Storm Logviewer