CVE-2022-42468

 

Published at: - 26-10-2022 06:15

Last modified: - 26-10-2022 09:38

Total changes: - 1

Description

Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• N/A-
• N/A-
• N/A-

 

Keywords

NVD

 

CVE-2022-42468

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures