QwikSec

Security Database

CVE

CWE

Training

CVE-2022-34916

Published: Aug 21, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.

Vendor	Product	Versions
Apache Software Foundation	Apache Flume	affected `flume-jms-source - < 1.11.0`

Weaknesses (CWE)

References

https://issues.apache.org/jira/browse/FLUME-3428

x_refsource_MISC

https://lists.apache.org/thread/qkmt4r2t9tbrxrdbjg1m2oczbvczd9zn

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.