Executive brief
Incorrect Default Permissions in Apache DolphinScheduler
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler-api
- PyPI apache-dolphinscheduler
Junglewise Threat Intelligence
CVE-2020-13922: Incorrect Default Permissions in Apache DolphinScheduler
CVE-2020-13922 · Severity: low · CVSS 3.1 · Published 2022-02-09
Technologies: org.apache.dolphinscheduler:dolphinscheduler-api (Maven), apache-dolphinscheduler (PyPI). Vendors: Maven, PyPI.
Related threats
- Apache DolphinScheduler incorrect authorization in alert instances
- Apache DolphinScheduler incorrect authorization in workflow instances
- Apache DolphinScheduler incorrect authorization in task deletion
- Apache DolphinScheduler incorrect authorization in /v2 interface
- Apache DolphinScheduler authorization bypass in DataSource API