CVE-2017-9799

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner…

published August 9, 2017

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04872 · 92.0th percentile
Published
2017-08-09T21:00Z
EPSS history
Timeline
  • 09 AUG 21:00Z
    It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner…
    cvelistv5