Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-27181

Apache Linkis Basic management services: Privilege Escalation Attack vulnerability

Description

In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Linkis Basic management services

Default version status: unaffected

  • 1.3.2 to < 1.6.0affected

References