Lucene search
Veracode Vulnerability DatabaseVERACODE:28851HistoryDec 30, 2020 - 1:49 a.m.
Authorization Bypass
2020-12-3001:49:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
authorization bypass
improper handling
permissions check
canflush
canperformsystemactions
software vulnerability
EPSS
0.001
Percentile
47.4%
accumulo-master is vulnerable to authorization bypass. The vulnerability exists through improper handling of permissions check during canFlush and canPerformSystemActions.
References
www.openwall.com/lists/oss-security/2020/12/29/1
github.com/apache/accumulo/commit/58b9de18eb51e91aa9f01338ef5772ca92e329e6
github.com/apache/accumulo/pull/1828
lists.apache.org/thread.html/rf8c1a787b6951d3dacb9ec58f0bf1633790c91f54ff10c6f8ff9d8ed%40%3Cuser.accumulo.apache.org%3E
lists.apache.org/thread.html/rf8c1a787b6951d3dacb9ec58f0bf1633790c91f54ff10c6f8ff9d8ed@%3Cannounce.apache.org%3E
Related
osv
osv
CVE-2020-17533
2020-12-29 12:15:12
Improper privilege handling in Apache Accumulo
2022-02-09 22:37:59
cvelist
cvelist
CVE-2020-17533 Apache Accumulo Improper Handling of Insufficient Permissions
2020-12-29 11:30:13
github
github
Improper privilege handling in Apache Accumulo
2022-02-09 22:37:59
prion
prion
Code injection
2020-12-29 12:15:00
nvd
nvd
CVE-2020-17533
2020-12-29 12:15:12
cve
cve
CVE-2020-17533
2020-12-29 12:15:12