PT-2023-31042

CVE-2023-49068

Publicado

2023-11-27

Atualizado

2023-12-01

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.2.1

Description The issue is related to the exposure of sensitive information to an unauthorized actor. Users are advised to ensure that logs are only available to trusted operators as a temporary measure.

Recommendations For versions prior to 3.2.1, upgrade to version 3.2.1 when it becomes available, as it fixes the issue. In the meantime, make sure the logs are only available to trusted operators.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

4Ra1N

Y4Tacker

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados