Non notée
CVE-2026-108823 Apache Kylin: Potential unauthenticated job metadata replacement
Description
Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which is uncommon. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kylin 4.0 | 4.0.0 → 5.0.4 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Kylin
Les 40 CVE de Apache Kylin →
CVE-2026-108837
Apache Kylin: Potential computed-column resource exhaustion
Non notée
CVE-2026-108833
Apache Kylin: default startup profile miss security settings
Non notée
CVE-2026-108780
Potential JDBC source configuration validation vulnerability in Apache Kylin
Non notée
CVE-2026-108776
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin
Non notée