PT-2023-31042

CVE-2023-49068

Published

2023-11-27

Updated

2023-12-01

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.2.1

Description The issue is related to the exposure of sensitive information to an unauthorized actor. Users are advised to ensure that logs are only available to trusted operators as a temporary measure.

Recommendations For versions prior to 3.2.1, upgrade to version 3.2.1 when it becomes available, as it fixes the issue. In the meantime, make sure the logs are only available to trusted operators.

Exploitability

Exploit

Fix

Impacts

Researchers

4Ra1N

Y4Tacker

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers