Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Electrum

#30559of 56,328
8.8Total CVSS
Vulnerabilities · 1
PT-2020-14175
8.8
2020-06-30
Presto · Presto · CVE-2020-15087
**Name of the Vulnerable Software and Affected Versions** Presto versions prior to 337 **Description** Authenticated users can bypass authorization checks by directly accessing internal APIs. This issue impacts Presto server installations with secure internal communication configured. It does not affect installations without secure internal communication, as they are inherently insecure. This issue only affects Presto server installations and does not affect clients such as the CLI or JDBC driver. **Recommendations** For versions prior to 337, update to version 337 or later to resolve the issue. As a temporary workaround, consider blocking network access to internal APIs on the coordinator and workers to mitigate the risk of exploitation.