Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-24778

Apache StreamPipes: Resources Permission Escalation

Description

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache StreamPipes

Default version status: unaffected

  • 0 to ≤ 0.95.1affected

References