CVE-2020-1932 Information
Feb 14, 2021
cve
Description
An information disclosure issue was found in Apache Superset 0.34.0 0.34.1 0.35.0 and 0.35.1. Authenticated Apache Superset users are able to retrieve other users’ information including hashed passwords by accessing an unused and undocumented API endpoint on Apache Superset.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Reference
Attack Complexity
LOW
Privileges Required
LOW
User Interaction Required
LOW
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
HIGH
Availability Impact
NONE
Base Score
NONE
Base Severity
6.5
Share on: