Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-38294
PUBLISHED
More InfoOfficial Page
Assigner-apache
Assigner Org ID-f0158376-9dc2-43b6-827c-5f631a4d8d09
View Known Exploited Vulnerability (KEV) details
Published At-25 Oct, 2021 | 12:22
Updated At-04 Aug, 2024 | 01:37
Rejected At-
▼CVE Numbering Authority (CNA)
Shell Command Injection Vulnerability in Nimbus Thrift Server

A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and Apache Storm 1.x prior to 1.2.4. A specially crafted thrift request to the Nimbus server allows Remote Code Execution (RCE) prior to authentication.

Affected Products
Vendor
The Apache Software FoundationApache Software Foundation
Product
Apache Storm
Platforms
  • Non-Windows
Versions
Affected
  • From v1.0.0 before Apache Storm* (custom)
Vendor
The Apache Software FoundationApache Software Foundation
Product
Apache Storm
Versions
Affected
  • From Apache Storm before v1.2.4 (custom)
    • -> unaffectedfromv2.1.1
    • -> unaffectedfromv2.2.1
    • -> unaffectedfromv2.3.0
Problem Types
TypeCWE IDDescription
CWECWE-74CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Type: CWE
CWE ID: CWE-74
Description: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
unknown
other:
high
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds

Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0 Apache Storm 2.1.x users should upgrade to version 2.1.1 Apache Storm 1.x users should upgrade to version 1.2.4

Exploits
Credits
Apache Storm would like to thank @pwntester Alvaro Muñoz of the GitHub Security Lab team for reporting this issue.
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://lists.apache.org/thread.html/r5fe881f6ca883908b7a0f005d35115af49f43beea7a8b0915e377859%40%3Cuser.storm.apache.org%3E
x_refsource_MISC
https://seclists.org/oss-sec/2021/q4/44
x_refsource_MISC
http://packetstormsecurity.com/files/165019/Apache-Storm-Nimbus-2.2.0-Command-Execution.html
x_refsource_MISC
Hyperlink: https://lists.apache.org/thread.html/r5fe881f6ca883908b7a0f005d35115af49f43beea7a8b0915e377859%40%3Cuser.storm.apache.org%3E
Resource:
x_refsource_MISC
Hyperlink: https://seclists.org/oss-sec/2021/q4/44
Resource:
x_refsource_MISC
Hyperlink: http://packetstormsecurity.com/files/165019/Apache-Storm-Nimbus-2.2.0-Command-Execution.html
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://lists.apache.org/thread.html/r5fe881f6ca883908b7a0f005d35115af49f43beea7a8b0915e377859%40%3Cuser.storm.apache.org%3E
x_refsource_MISC
x_transferred
https://seclists.org/oss-sec/2021/q4/44
x_refsource_MISC
x_transferred
http://packetstormsecurity.com/files/165019/Apache-Storm-Nimbus-2.2.0-Command-Execution.html
x_refsource_MISC
x_transferred
Hyperlink: https://lists.apache.org/thread.html/r5fe881f6ca883908b7a0f005d35115af49f43beea7a8b0915e377859%40%3Cuser.storm.apache.org%3E
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://seclists.org/oss-sec/2021/q4/44
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://packetstormsecurity.com/files/165019/Apache-Storm-Nimbus-2.2.0-Command-Execution.html
Resource:
x_refsource_MISC
x_transferred
Details not found