CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Apache. Its EPSS score suggests a 78.3% probability of exploitation in the next 30 days.
CVE
CVE-2020-13937
Severity
MEDIUM
CVSS
5.3
EPSS
78.33%
Apache
Original NVD Description
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Related CVEs
Other vulnerabilities affecting the same vendor(s)