CyberRota Analysis
AI-GeneratedCertain Apache Doris FE HTTP REST administrative APIs are vulnerable due to inadequate authentication, allowing unauthenticated attackers with network access to execute unauthorized administrative operations. This could compromise cluster integrity and availability, potentially resulting in instability or denial of service. Organizations using Apache Doris versions prior to 3.1.0 should prioritize upgrading to version 3.1.0 or later to mitigate this critical risk.
Original NVD Description
Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service. This issue affects Apache Doris versions prior to 3.1.0. Users are advised to upgrade to Apache Doris 3.1.0 or later.
Related CVEs
Other vulnerabilities affecting the same vendor(s)