Advisories · Technology
Apache Software Foundation Apache Storm UI.
Every CVE that names Apache Software Foundation Apache Storm UI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI
- Apache Software Foundation Apache Storm Nimbus
- Apache Software Foundation Apache Storm UI
- Hard-coded credentials
- Broken access control
- CVSS 6.5 Medium
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page
- Apache Software Foundation Apache Storm Nimbus
- Apache Software Foundation Apache Storm UI
- Information disclosure
- Hard-coded credentials