CVE-2024-41169
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files.
This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0.
Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.
| Software | From | Fixed in |
|---|---|---|
org.apache.zeppelin / zeppelin-interpreter
|
0.10.1 | 0.12.0 |
|
org.apache.zeppelin / zeppelin-server
|
0.10.1 | 0.12.0 |
| apache / zeppelin | 0.10.1 | 0.12.0 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime