Lucene search
HistoryOct 26, 2022 - 4:15 p.m.
CVE-2022-42468
apache flume
rce
jms source
jndi
remote code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.006
Percentile
79.5%
Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.
Affected configurations
Node
apacheflumeRange1.4.0–1.10.1
Related
osv
osv
prion
prion
Remote code execution
2022-10-26 16:15:00
github
github
veracode
veracode
Remote Code Execution (RCE)
2022-10-27 06:36:31
cvelist
cvelist
cve
cve
CVE-2022-42468
2022-10-26 16:15:11
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.006
Percentile
79.5%
Related for NVD:CVE-2022-42468