Description

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

Remediation

References

https://docs.google.com/presentation/d/1W5KU7ffh4dheR8iD54ulABImi6byAhSI-OhEKw2adRo/edit?usp=sharing

Related Vulnerabilities

CVE-2020-14446 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.policyeditor.ui

CVE-2017-16210 Vulnerability in npm package jn_jj_server

CVE-2017-1000487 Vulnerability in maven package org.codehaus.plexus:plexus-utils

CVE-2016-6798 Vulnerability in maven package org.apache.sling:org.apache.sling.xss

CVE-2016-10687 Vulnerability in npm package windows-selenium-chromedriver

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory NVD-CWE-noinfo