HTTP: Apache Kylin REST API Information Disclosure
This signature detects attempts to exploit a known vulnerability against Apache Kylin REST API. A successful attack can lead to sensitive information disclosure.
Extended Description
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Affected Products
Apache kylin
References
CVE: CVE-2020-13937
URL: https://lists.apache.org/thread/g24p72p98c5gxjyd64qsc2hgjqy8k3z4
Short Name
HTTP:APACHE:KYLIN-REST-API-ID
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
API Apache CVE-2020-13937 Disclosure Information Kylin REST
Release Date
03/22/2022
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3476
False Positive
Unknown
Vendors
Apache
CVSS Score
5.0