CVE-2020-13937: Medium severity apache kylin vulnerability
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-13937?
CVE-2020-13937 is a vulnerability in Apache Kylin versions 2.0.0 to 2.6.6 and 3.0.0-alpha to 4.0.0-alpha that exposes Kylin's configuration information without authentication.
How severe is CVE-2020-13937?
CVE-2020-13937 has a severity level of 5.3, which is considered medium.
How can I check if my Apache Kylin version is affected?
You can check if your Apache Kylin version is affected by CVE-2020-13937 by referring to the list of affected versions provided in the vulnerability description.
How do I fix CVE-2020-13937?
To fix CVE-2020-13937, it is recommended to upgrade to a patched version of Apache Kylin that addresses the vulnerability.
Where can I find more information about CVE-2020-13937?
You can find more information about CVE-2020-13937 on the Apache Kylin mailing list thread provided in the references.