CVE-2020-13937
Description
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylins configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Risk Information
Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
93.47
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2020-13937 are fixed in Apache - kylin 3.1.1 | Windows |
| Vulnerabilities CVE-2020-13937 are fixed in Apache - kylin 4.0.0 | Windows |
| Vulnerabilities CVE-2020-13937 are fixed in Apache - kylin for Linux 3.1.1 | Linux |
| Vulnerabilities CVE-2020-13937 are fixed in Apache - kylin for Linux 4.0.0 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234