CVE-2020-1958: Medium severity Apache Druid vulnerability
When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1958?
CVE-2020-1958 is a vulnerability in Apache Druid 0.17.0 that allows callers with valid LDAP credentials to bypass the credentialsValidator.userSearch filter barrier.
How does LDAP authentication work in Apache Druid 0.17.0?
LDAP authentication in Apache Druid 0.17.0 allows users to authenticate with the system using their LDAP credentials.
What is the impact of CVE-2020-1958?
The impact of CVE-2020-1958 is that users with valid LDAP credentials can bypass the authentication filter and potentially gain unauthorized access to Druid APIs.
How can I check if my Apache Druid version is affected?
You can check if your Apache Druid version is affected by CVE-2020-1958 by verifying if you are running version 0.17.0.
How do I mitigate CVE-2020-1958?
To mitigate CVE-2020-1958, it is recommended to upgrade to a patched version of Apache Druid that addresses this vulnerability.