Vulnerability Details : CVE-2017-9799
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.
Products affected by CVE-2017-9799
- cpe:2.3:a:apache:storm:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:storm:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:storm:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:storm:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:storm:1.0.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-9799
0.29%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 68 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-9799
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
References for CVE-2017-9799
-
https://lists.apache.org/thread.html/b9125bf507ed6f2ca6e85ba1a4b44e232aa70eeddfba2a9d8a954127@%3Cdev.storm.apache.org%3E
[CVE-2017-9799] Apache Storm Possible Code Execution As A Different User - Pony MailMailing List;Vendor Advisory
-
http://www.securityfocus.com/bid/100235
Apache Storm CVE-2017-9799 Remote Code Execution VulnerabilityThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1039116
Apache Storm Unspecified Flaw Lets Remote Authenticated Users View Other User Credentials in Certain Cases. - SecurityTrackerThird Party Advisory;VDB Entry
Jump to