CVE-2023-43666
Assigner: apache
Published: 2023-10-16T08:08:10.148Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache InLong
vendor: Apache Software Foundation
versions: lessThanOrEqual: 1.8.0
status: affected
version: 1.4.0
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: Insufficient Verification of Data Authenticity vulnerability in Apache InLong.<p>This issue affects Apache InLong: from 1.4.0 through 1.8.0,&nbsp;

<span style="background-color: rgb(255, 255, 255);">General user can view all user data like Admin account.</span>

<span style="background-color: var(--wht);">Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.</span></p><p>

[1]&nbsp;<a target="_blank" rel="nofollow" href="https://github.com/apache/inlong/pull/8623">https://github.com/apache/inlong/pull/8623</a></p><p></p>
value: Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, 

General user can view all user data like Admin account.

Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/8623 


metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
type: CWE
source: discovery: UNKNOWN
title: Apache InLong: General user Unauthorized access User Management
x_generator: engine: Vulnogram 0.1.0-dev