CVE-2018-1317

In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication

published April 23, 2019

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04580 · 91.6th percentile
Published
2019-04-23T14:45Z
EPSS history
Timeline
  • 23 APR 14:45Z
    In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication
    cvelistv5