VDB
BDU%3A2019-04290
BDU%3A2019-04290
PUBLISHED
CVSS 4 MEDIUM
Уязвимость библиотеки Node.js языка описания интерфейсов Apache Thrift, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
4
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, Oracle Corp. | Thrift, NoSQL Database |
Timeline
- Dec 3, 2019 CVE Published
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
References
- http://www.securityfocus.com/bid/106501 url
- https://access.redhat.com/errata/RHSA-2019:1545 url
- https://access.redhat.com/errata/RHSA-2019:3140 url
- https://lists.apache.org/thread.html/6e9edd282684896cedf615fb67a02bebfe6007f2d5baf03ba52e34fd@%3Cuser.thrift.apache.org%3E url
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html url
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory