CVE-2020-17519
Last modified
CVE-2020-17519 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. CISA has confirmed active exploitation in the wild. EPSS estimates a 97.86% chance of exploitation in the next 30 days.
Description
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Flink | >= 1.11.0, < 1.11.3 |
References
- http://packetstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2021/01/05/2Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/160849/Apache-Flink-1.11.0-Arbitrary-File-Read-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2021/01/05/2Mailing List, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17519US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2020-17519?
How severe is CVE-2020-17519?
How do I fix CVE-2020-17519?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-17513In Apache Airflow versions prior to 1.10.13, the Charts and …5.3
- CVE-2020-17514Apache Fineract prior to 1.5.0 disables HTTPS hostname verif…7.4
- CVE-2020-17515The "origin" parameter passed to some of the endpoints like …6.1
- CVE-2020-17516Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, …7.5
- CVE-2020-17517The S3 buckets and keys in a secure Apache Ozone Cluster mus…7.5
- CVE-2020-17518Apache Flink 1.5.1 introduced a REST handler that allows you…7.5
- CVE-2020-1752A use-after-free vulnerability introduced in glibc upstream …7
- CVE-2020-17520In the Pulsar manager 0.1.0 version, malicious users will be…6.5
- CVE-2020-17521Apache Groovy provides extension methods to aid with creatin…5.5
- CVE-2020-17522When ORT (now via atstccfg) generates ip_allow.config files …5.8
- CVE-2020-17523Apache Shiro before 1.7.1, when using Apache Shiro with Spri…9.8
- CVE-2020-17524Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2020-17519?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST