CISA Warns of Actively Exploited Apache Flink Security Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday included a security flaw impacting Apache Flink, the open-supply, unified stream-processing and batch-processing framework, to the Recognized Exploited Vulnerabilities (KEV) catalog, citing evidence of energetic exploitation.

Tracked as CVE-2020-17519, the issue relates to a case of incorrect obtain command that could permit an attacker to go through any file on the community filesystem of the JobManager via its Rest interface.

This also usually means that a distant unauthenticated attacker could send a specially crafted listing traversal ask for that could permit unauthorized accessibility to delicate data.

The vulnerability, which impacts Flink variations 1.11., 1.11.1, and 1.11.2, was tackled in January 2021 in variations 1.11.3 or 1.12..

The exact mother nature of the attacks exploiting the flaw is presently mysterious, whilst Palo Alto Networks Unit 42 warned of comprehensive in-the-wild abuse between November 2020 and January 2021.

“Numerous recently noticed exploits, which includes CVE-2020-28188, CVE-2020-17519, and CVE-2020-29227, have emerged and were being repeatedly being exploited in the wild as of late 2020 to early 2021,” security researchers Lei Xu, Yue Guan, and Vaibhav Singhal famous in April 2021.

In light of the lively exploitation of CVE-2020-17519, federal agencies are recommended to implement the most up-to-date fixes by June 13, 2024, to safeguard their networks versus energetic threats.

Uncovered this article appealing? Observe us on Twitter  and LinkedIn to study extra special articles we publish.

Some parts of this article are sourced from:
thehackernews.com