Apache Storm CVE-2018-8008 Arbitrary File Write Vulnerability
BID:104418
CVE-2018-8008 |Info
Apache Storm CVE-2018-8008 Arbitrary File Write Vulnerability
| Bugtraq ID: | 104418 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2018-8008 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 05 2018 12:00AM |
| Updated: | Jun 05 2018 12:00AM |
| Credit: | Snyk Security Research Team |
| Vulnerable: |
Apache Storm 1.2.1 Apache Storm 1.2 Apache Storm 1.1.2 Apache Storm 1.1.1 Apache Storm 1.1 Apache Storm 1.0.6 Apache Storm 1.0.4 Apache Storm 1.0.3 Apache Storm 1.0.2 Apache Storm 1.0.1 Apache Storm 1.0 |
| Not Vulnerable: |
Apache Storm 1.2.2 Apache Storm 1.1.3 |
Discussion
Apache Storm CVE-2018-8008 Arbitrary File Write Vulnerability
Apache Storm is prone to a security vulnerability that allows remote attackers to write arbitrary files.
Successful exploits may allow an attacker to write arbitrary files to the affected system. This may aid in further attacks.
Storm 1.0.6 and prior, 1.2.1 and prior, and 1.1.2 and prior are vulnerable.
Apache Storm is prone to a security vulnerability that allows remote attackers to write arbitrary files.
Successful exploits may allow an attacker to write arbitrary files to the affected system. This may aid in further attacks.
Storm 1.0.6 and prior, 1.2.1 and prior, and 1.1.2 and prior are vulnerable.
Exploit / POC
Apache Storm CVE-2018-8008 Arbitrary File Write Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].