Get Started

Data Management and Analytics

Selected category
2 Jul 2024 Data Management and Analytics
MongoDB: The vulnerability allows attackers to affect database performance

In MongoDB version 7.0.3 a medium severity vulnerability CVE-2024-6375 was detected. This vulnerability allows attackers to affect database performance. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6375/.

 Read more Database
28 Jun 2024 Data Management and Analytics
pgAdmin: Critical Installation Directory Permission Vulnerability on Debian and RHEL 8 Platforms

In pgAdmin version 8.8 and earlier a high severity vulnerability CVE-2024-6238 was detected. The vulnerability involves installation directory permissions on Debian and RHEL 8 platforms, allowing attackers to gain unauthorized access. To fix this issue, users should update to version 8.9 to fix this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6238.

 Read more Database
27 Jun 2024 Data Management and Analytics
Airflow: The vulnerability allows attackers to get access to sensitive data

In Airflow version 2.9.1 a low severity vulnerability CVE-2024-25142 was detected. This vulnerability allows attackers to get access to sensitive data. To address this issue, users must update version 2.9.2. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-25142/.

 Read more Data Analytics
27 Jun 2024 Data Management and Analytics
Elasticsearch: The vulnerability allows attackers to get access to sensitive data

In Elasticsearch version 8.14.0 a medium severity vulnerability CVE-2024-23445 was detected. This vulnerability allows attackers to get access to sensitive data. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-23445/.

 Read more Data Analytics
26 Jun 2024 Data Management and Analytics
Superset: The vulnerability allows attackers to get access to the database

In Apache Superset versions 4.0.0 and 3.1.2 a medium severity vulnerability CVE-2024-34693 was detected. This vulnerability allows attackers to get access to the database. To address this issue, users must upgrade to version 4.0.1 or 3.1.3. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-34693/.

 Read more Data Analytics
23 Jun 2024 Data Management and Analytics
Kibana: The vulnerability allows attackers to upload a maliciously crafted osquery pack.

In Kibana versions prior to 7.17.22 and prior to 8.14.0 a medium severity vulnerability CVE-2024-23443 was detected. This vulnerability allows attackers to upload a maliciously crafted osquery pack. To address this issue, users should upgrade Kibana to version 7.17.22, 8.14.0 or higher. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-23443/.

 Read more Data Analytics
23 Jun 2024 Data Management and Analytics
Kibana: Phishing Risk Due to Redirect Issue

In Kibana versions prior to 7.17.22 and from 8.0.0 prior to 8.14.0 a medium severity vulnerability CVE-2024-23442 was detected. This issue allows malicious URLs to redirect users to fake websites, making phishing attacks easier. Currently, there is no fix version for this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-23442/.

 Read more Data Analytics
22 Jun 2024 Data Management and Analytics
Airflow: The vulnerability allows attackers to store sensitive data in the local cache of the browser

In Apache Airflow versions before 2.9.2 a low severity vulnerability CVE-2024-25142 was detected. This vulnerability allows attackers to store sensitive data in the local cache of the browser. To address this issue, users must upgrade to version 2.9.2. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-25142/.

 Read more Data Analytics
18 Jun 2024 Data Management and Analytics
MongoDB: Improper Metadata Validation Leads to Potential Server Unavailability

In MongoDB Server versions before 7.0.6, 6.0.14, and 5.0.25 a high severity vulnerability CVE-2024-3372 was detected. Improper metadata validation can cause MongoDB Server to incorrectly serialize BSON, resulting in unexpected behavior and serverStatus response issues. To address this issue, users should upgrade MongoDB to version 5.0.25, 6.0.14, 7.0.6, 7.2.1 or higher For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-3372.

 Read more Database