Apache Kylin Unauth

Published on 10 Jan 2022
Vulnerability

Description

One restful api in Apache Kylin exposes Kylin’s configuration information without authentication, which is dangerous because some confidential information entries will be exposed to everyone.

Recommendation

  • Update Apache Kylin to the latest version
Jijith Rajan
Written by
Cyber Security Engineer

His passion for staying abreast of the latest security threats and trends, coupled with his hands-on experience, allows him to actively contribute to the protection of digital assets. Jijith's dedication and enthusiasm make him a promising talent in the ever-evolving realm of cybersecurity, promising a safer digital future.

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo