| ID | 51650 |
| Created | Jun 06, 2022 |
| Updated | Jun 22, 2022 |
| Severity |
|
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | pass |
| Active |
|
| Affected OS | Windows, Linux, MacOS |
| Affected App | Apache |
Legend
| Active/Available |
|
| InActive/Not Available |
|
Update History
| Date | Version | Detail |
|---|---|---|
| 2022-06-23 | 21.344 |
Refine Search
Threat Encyclopedia
Apache.Druid.Loaddata.Arbitrary.File.Read
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Apache Druid.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker may be able exploit this to disclose arbitrary files within the context of the application, via a crafted request.
Affected Products
Apache Druid prior to 0.22
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor:
https://druid.apache.org/
