CVE-2023-29055
Last modified
CVE-2023-29055 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP (or other plain text protocol), it is possible for network sniffers to hijack the HTTP payload and get access to the content of kylin.properties and potentially the containing credentials. To avoid this threat, users are recommended to * Always turn on HTTPS so that network payload is encrypted. * Avoid putting credentials in kylin.properties, or at least not in plain text. * Use network firewalls to protect the serverside such that it is not accessible to external attackers. * Upgrade to version Apache Kylin 4.0.4, which filters out the sensitive content that goes to the Server Config web interface.. EPSS estimates a 1.15% chance of exploitation in the next 30 days.
Description
In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP (or other plain text protocol), it is possible for network sniffers to hijack the HTTP payload and get access to the content of kylin.properties and potentially the containing credentials. To avoid this threat, users are recommended to * Always turn on HTTPS so that network payload is encrypted. * Avoid putting credentials in kylin.properties, or at least not in plain text. * Use network firewalls to protect the serverside such that it is not accessible to external attackers. * Upgrade to version Apache Kylin 4.0.4, which filters out the sensitive content that goes to the Server Config web interface.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Kylin | >= 2.0.0, < 4.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-29055?
How severe is CVE-2023-29055?
How do I fix CVE-2023-29055?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-2905Due to a failure in validating the length of a provided MQTT…8.8
- CVE-2023-29050The optional "LDAP contacts provider" could be abused by pri…9.6
- CVE-2023-29051User-defined OXMF templates could be used to access a limite…8.1
- CVE-2023-29052Users were able to define disclaimer texts for an upsell sho…5.4
- CVE-2023-29053A vulnerability has been identified in JT Open (All versions…7.8
- CVE-2023-29054A vulnerability has been identified in SCALANCE X200-4P IRT …7.4
- CVE-2023-29056A valid LDAP user, under specific conditions, will default t…5.9
- CVE-2023-29057A valid XCC user's local account permissions overrides their…8.8
- CVE-2023-29058A valid, authenticated XCC user with read-only permissions c…6.5
- CVE-2023-290593CX DesktopApp through 18.12.416 has embedded malicious code…7.8
- CVE-2023-2906Due to a failure in validating the length provided by an att…6.5
- CVE-2023-29060The FACSChorus workstation operating system does not restric…5.7
Are you affected by CVE-2023-29055?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST