CVE-2015-3188: Critical severity Apache storm vulnerability
The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.
Other sources
The UI daemon in Apache Storm 0.10.0-beta allows remote users to run arbitrary code as the user running the web server. With kerberos authentication this could allow impersonation of arbitrary users on other systems, including HDFS and HBase.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3188?
CVE-2015-3188 has a severity rating that is considered high due to its ability to allow remote code execution.
How do I fix CVE-2015-3188?
To mitigate CVE-2015-3188, upgrade Apache Storm to version 0.10.0-beta1 or later.
What software is affected by CVE-2015-3188?
CVE-2015-3188 affects Apache Storm version 0.10.0 and its beta version prior to 0.10.0-beta1.
Can CVE-2015-3188 lead to unauthorized access?
Yes, CVE-2015-3188 can allow remote attackers to execute arbitrary code, potentially leading to unauthorized access.
What type of attacks can exploit CVE-2015-3188?
CVE-2015-3188 can be exploited through remote execution of arbitrary code via unspecified vectors in the UI daemon.