CVE-2018-1331: High severity Apache storm vulnerability
In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a secure storm cluster in some cases could execute arbitrary code as a different user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1331?
CVE-2018-1331 is a vulnerability in Apache Storm that allows an attacker to execute arbitrary code as a different user.
What versions of Apache Storm are affected by CVE-2018-1331?
Apache Storm versions 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1 are affected by CVE-2018-1331.
What is the severity of CVE-2018-1331?
CVE-2018-1331 has a severity value of 8.8, which is considered high.
How can an attacker exploit CVE-2018-1331?
An attacker with access to a secure Storm cluster can exploit CVE-2018-1331 to execute arbitrary code as a different user.
Where can I find more information about CVE-2018-1331?
You can find more information about CVE-2018-1331 on the Apache Storm website and the Openwall mailing list.