Non notée
CVE-2024-29120 In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as…
Description
In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc. Mitigation: all users should upgrade to 2.1.4
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache StreamPark 2.0 | 2.0.0 → < 2.1.4 | 2.1.4 |
Références
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache StreamPark
Les 9 CVE de Apache StreamPark →
CVE-2025-53960
When issuing JSON Web Tokens (JWT), Apache StreamPark directly uses the user's password as the HMAC signing key (e.g.,…
Non notée
CVE-2025-54947
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists
Non notée
CVE-2025-54981
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for…
Non notée
CVE-2025-30001
Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark
Non notée