H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-05-23
Last seen2024-05-23

Confidence

—

Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.

Labels

exploitedkev

CISA KEV context

Vendor / productApache Flink
Added2024-05-23
Due date2024-06-13
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2020-17519
open
cwe
CWE-552
open