Skip to content
OpenAdvisories
High · 8.8 CVE-2024-27181 EUVD-2024-2655GHSA-v352-rg37-5q5m

Apache Linkis Basic management services: Privilege Escalation Attack vulnerability

Published Aug 2, 2024 · Updated Aug 12, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Linkis Basic management services Package: org.apache.linkis:linkis Ecosystem: Maven

Description

In Apache Linkis <= 1.5.0,

Privilege Escalation in Basic management services where the attacking user is

a trusted account

allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Linkis Basic management services 1.3.2 – < 1.6.0 1.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.linkis:linkis < 1.6.0 1.6.0 GHSA-v352-rg37-5q5m

References