Critical · published January 5, 2021
CVSS calls it critical at 9.1. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
🚨 An upgrade to Flink 1.11.3 or 1.12.0 is an absolute must! A sneaky change in Apache Flink's REST interface lets attackers directly access any file on the JobManager's local filesystem. 🔥 Think of it like a restaurant where the chef has left the back door wide open — anyone can stroll in and grab sensitive recipes or even customer records without breaking a sweat! This vulnerability is absolutely devastating, allowing an attacker to read any file the JobManager can access. Imagine the chaos if sensitive data or configuration files were leaked! The potential exposure could lead to serious breaches or misuse of data.
Think of it like a restaurant where the chef has left the back door wide open — anyone can stroll in and grab sensitive recipes or even customer records without breaking a sweat! This vulnerability arises from a change in Apache Flink's REST interface starting from version 1.11.0, allowing unauthorized access to files on the local filesystem of the JobManager process.
This vulnerability is absolutely devastating, allowing an attacker to read any file the JobManager can access. Imagine the chaos if sensitive data or configuration files were leaked! The potential exposure could lead to serious breaches or misuse of data. Immediately upgrade your Flink instance to version 1.11.3 or 1.12.0 to close this critical gap. Make sure to check your deployment for any exposure to the REST interface and implement proper access controls. Stay vigilant! You've got this! By taking these steps, you'll reinforce your defenses and keep your data safe! 🛡️