Description (CNA)
Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ververica / Ververica Platform | affected 2.14.0 |
CWE
CWE-425
References
- https://github.com/ververica/ververica-platform-playground
- https://www.ververica.com
- https://github.com/gozan10/cve/issues/18
ADP enrichment
No English description supplied.