CVE-2024-27181CWE-269

Apache Linkis Basic management services: Privilege Escalation Attack vulnerability

High · published August 2, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

In Apache Linkis <= 1.5.0,

Privilege Escalation in Basic management services where the attacking user is

a trusted account

allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-08-02T09:27Z
EPSS history
Timeline
  • 02 AUG 09:27Z
    Apache Linkis Basic management services: Privilege Escalation Attack vulnerability
    cvelistv5