March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2021-20034 – SonicWall SMA 100 series appliances
September 27, 2021
Rewterz Threat Advisory – CVE-2021-23054 – F5 BIG-IP (APM) resource information page Vulnerability
September 27, 2021
Rewterz Threat Advisory – CVE-2021-20034 – SonicWall SMA 100 series appliances
September 27, 2021
Rewterz Threat Advisory – CVE-2021-23054 – F5 BIG-IP (APM) resource information page Vulnerability
September 27, 2021
Severity
High
Analysis Summary
CVE-2021-36749
Apache Druid could allow a remote authenticated attacker to obtain sensitive information, caused by improper access control by the HTTP inputSource. By passing a file URL to the HTTP InputSource, an attacker could exploit this vulnerability to obtain data from other sources than intended, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Affected Vendors
- Apache
Affected Products
- Apache Druid 0.21.0
- Apache Druid 0.21.1
Remediation
Upgrade to the latest version of Apache Druid, available from the Apache Web site.