GitHub Advisoryadvisory · Maven

GHSA-87p2-cvhq-q4mv Authentication bypass in Apache Zeppelin

HIGH Published 2021-09-07 Modified 2021-09-13 Official page ↗
Aliases
CVE-2020-13929
Ecosystem
Maven
Packages
org.apache.zeppelin:zeppelin
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-287
Reviewed
2021-09-03

Affected packages

• Maven org.apache.zeppelin:zeppelin: < 0.10.0 → fixed in 0.10.0

Description

Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to act as another user. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

Related

Alias · CVE (1)

  • CVE-2020-13929 Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to act as another… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References