CVE-2020-17519 — Vulnerability intelligence

Apache — Flink

Published: 2021-01-05T11:40:14.000Z

CVSS

9.1

CISA KEV

Known exploitation

Original source text (not a translation)

Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.

Sources

• Apache Flink Improper Access Control Vulnerability
• Original advisory
• Original advisory
• CVE-2020-17519