PT-2026-58018 · Apache · Apache Kylin+1

Haoran Zhao + 2 · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-62393

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Correção

Enumeração de Fraquezas

CWE-280

Identificadores relacionados

CVE-2026-62393

Produtos afetados

Apache Kylin

Kylin

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-62393 · Nota de Segurança
• http://openwall.com/lists/oss-security/2026/07/14/6 · Nota
• https://lists.apache.org/thread/xg8dcyjw0nkq5y8dhq3r25x3rxc62x9j · Aviso do Fabricante