Vulnerabilities > CVE-2021-26919 - Unspecified vulnerability in Apache Druid

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

apache

NVD

Published: 2021-03-30

Updated: 2024-11-21

Summary

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes. This issue was addressed in Apache Druid 0.20.2

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Druid - Apache Druid 0.1.0 Apache Druid 0.1.1 Apache Druid 0.1.2 Apache Druid 0.1.3 Apache Druid 0.1.4 Apache Druid 0.1.5 Apache Druid 0.1.6 Apache Druid 0.1.7 Apache Druid 0.1.8 Apache Druid 0.1.9 Apache Druid 0.1.10 Apache Druid 0.1.11 Apache Druid 0.1.12 Apache Druid 0.1.13 Apache Druid 0.1.14 Apache Druid 0.1.15 Apache Druid 0.1.16 Apache Druid 0.1.17 Apache Druid 0.1.18 Apache Druid 0.1.19 Apache Druid 0.1.20 Apache Druid 0.1.21 Apache Druid 0.1.22 Apache Druid 0.1.23 Apache Druid 0.1.24 Apache Druid 0.1.25 Apache Druid 0.2.0 Apache Druid 0.2.1 Apache Druid 0.2.2 Apache Druid 0.2.3 Apache Druid 0.2.4 Apache Druid 0.2.5 Apache Druid 0.2.6 Apache Druid 0.2.7 Apache Druid 0.2.8 Apache Druid 0.2.9 Apache Druid 0.3.0 Apache Druid 0.3.1 Apache Druid 0.3.2 Apache Druid 0.3.3 Apache Druid 0.3.4 Apache Druid 0.3.5 Apache Druid 0.3.6 Apache Druid 0.3.7 Apache Druid 0.3.8 Apache Druid 0.3.10 Apache Druid 0.3.11 Apache Druid 0.3.12 Apache Druid 0.3.13 Apache Druid 0.3.14 Apache Druid 0.3.15 Apache Druid 0.3.16 Apache Druid 0.3.18 Apache Druid 0.3.19 Apache Druid 0.3.20 Apache Druid 0.3.21 Apache Druid 0.3.22 Apache Druid 0.3.23 Apache Druid 0.3.24 Apache Druid 0.3.25 Apache Druid 0.3.26 Apache Druid 0.3.27 Apache Druid 0.3.27.1 Apache Druid 0.3.27.2 Apache Druid 0.3.28 Apache Druid 0.3.29 Apache Druid 0.3.30 Apache Druid 0.3.31 Apache Druid 0.3.32 Apache Druid 0.3.33 Apache Druid 0.3.34 Apache Druid 0.3.35 Apache Druid 0.3.36 Apache Druid 0.3.37 Apache Druid 0.3.38 Apache Druid 0.4.0 Apache Druid 0.4.1 Apache Druid 0.4.2 Apache Druid 0.4.3 Apache Druid 0.4.5 Apache Druid 0.4.6 Apache Druid 0.4.7 Apache Druid 0.4.8 Apache Druid 0.4.9 Apache Druid 0.4.10 Apache Druid 0.4.11 Apache Druid 0.4.12 Apache Druid 0.4.12.1 Apache Druid 0.4.12.2 Apache Druid 0.4.12.3 Apache Druid 0.4.12.4 Apache Druid 0.4.12.5 Apache Druid 0.4.13 Apache Druid 0.4.14 Apache Druid 0.4.15 Apache Druid 0.4.16 Apache Druid 0.4.17 Apache Druid 0.4.18 Apache Druid 0.4.19 Apache Druid 0.4.20 Apache Druid 0.4.21 Apache Druid 0.4.22 Apache Druid 0.4.23 Apache Druid 0.4.24 Apache Druid 0.4.25 Apache Druid 0.4.26 Apache Druid 0.4.27 Apache Druid 0.4.28 Apache Druid 0.4.29 Apache Druid 0.4.30 Apache Druid 0.4.31 Apache Druid 0.4.32 Apache Druid 0.4.32.1 Apache Druid 0.4.32.2 Apache Druid 0.5.0 Apache Druid 0.5.1 Apache Druid 0.5.2 Apache Druid 0.5.3 Apache Druid 0.5.4 Apache Druid 0.5.5 Apache Druid 0.5.7 Apache Druid 0.5.8 Apache Druid 0.5.9 Apache Druid 0.5.10 Apache Druid 0.5.11 Apache Druid 0.5.13 Apache Druid 0.5.14 Apache Druid 0.5.15 Apache Druid 0.5.16 Apache Druid 0.5.17 Apache Druid 0.5.18 Apache Druid 0.5.19 Apache Druid 0.5.20 Apache Druid 0.5.21 Apache Druid 0.5.22 Apache Druid 0.5.23 Apache Druid 0.5.24 Apache Druid 0.5.25 Apache Druid 0.5.26 Apache Druid 0.5.27 Apache Druid 0.5.28 Apache Druid 0.5.29 Apache Druid 0.5.30 Apache Druid 0.5.31 Apache Druid 0.5.32 Apache Druid 0.5.33 Apache Druid 0.5.34 Apache Druid 0.5.35 Apache Druid 0.5.36 Apache Druid 0.5.37 Apache Druid 0.5.38 Apache Druid 0.5.39 Apache Druid 0.5.40 Apache Druid 0.5.41 Apache Druid 0.5.42 Apache Druid 0.5.43 Apache Druid 0.5.44 Apache Druid 0.5.45 Apache Druid 0.5.46 Apache Druid 0.5.47 Apache Druid 0.5.48 Apache Druid 0.5.49 Apache Druid 0.5.50 Apache Druid 0.5.51 Apache Druid 0.5.52 Apache Druid 0.5.53 Apache Druid 0.5.54 Apache Druid 0.5.55 Apache Druid 0.5.56 Apache Druid 0.5.57 Apache Druid 0.5.58 Apache Druid 0.6.0 Apache Druid 0.6.1 Apache Druid 0.6.2 Apache Druid 0.6.3 Apache Druid 0.6.4 Apache Druid 0.6.5 Apache Druid 0.6.7 Apache Druid 0.6.8 Apache Druid 0.6.9 Apache Druid 0.6.10 Apache Druid 0.6.11 Apache Druid 0.6.12 Apache Druid 0.6.13 Apache Druid 0.6.14 Apache Druid 0.6.15 Apache Druid 0.6.16 Apache Druid 0.6.17 Apache Druid 0.6.18 Apache Druid 0.6.19 Apache Druid 0.6.20 Apache Druid 0.6.21 Apache Druid 0.6.22 Apache Druid 0.6.23 Apache Druid 0.6.24 Apache Druid 0.6.25 Apache Druid 0.6.26 Apache Druid 0.6.27 Apache Druid 0.6.28 Apache Druid 0.6.29 Apache Druid 0.6.30 Apache Druid 0.6.31 Apache Druid 0.6.32 Apache Druid 0.6.33 Apache Druid 0.6.34 Apache Druid 0.6.35 Apache Druid 0.6.36 Apache Druid 0.6.37 Apache Druid 0.6.38 Apache Druid 0.6.39 Apache Druid 0.6.40 Apache Druid 0.6.41 Apache Druid 0.6.42 Apache Druid 0.6.43 Apache Druid 0.6.44 Apache Druid 0.6.45 Apache Druid 0.6.46 Apache Druid 0.6.47 Apache Druid 0.6.48 Apache Druid 0.6.49 Apache Druid 0.6.50 Apache Druid 0.6.51 Apache Druid 0.6.52 Apache Druid 0.6.52.1 Apache Druid 0.6.52.2 Apache Druid 0.6.52.3 Apache Druid 0.6.52.4 Apache Druid 0.6.53 Apache Druid 0.6.54 Apache Druid 0.6.55 Apache Druid 0.6.56 Apache Druid 0.6.57 Apache Druid 0.6.58 Apache Druid 0.6.59 Apache Druid 0.6.60 Apache Druid 0.6.61 Apache Druid 0.6.61.1 Apache Druid 0.6.62 Apache Druid 0.6.63 Apache Druid 0.6.64 Apache Druid 0.6.65 Apache Druid 0.6.66 Apache Druid 0.6.68 Apache Druid 0.6.69 Apache Druid 0.6.70 Apache Druid 0.6.71 Apache Druid 0.6.72 Apache Druid 0.6.73 Apache Druid 0.6.74 Apache Druid 0.6.75 Apache Druid 0.6.76 Apache Druid 0.6.77 Apache Druid 0.6.78 Apache Druid 0.6.79 Apache Druid 0.6.81 Apache Druid 0.6.81.1 Apache Druid 0.6.81.2 Apache Druid 0.6.82 Apache Druid 0.6.83 Apache Druid 0.6.84 Apache Druid 0.6.85 Apache Druid 0.6.86 Apache Druid 0.6.87 Apache Druid 0.6.88 Apache Druid 0.6.89 Apache Druid 0.6.90 Apache Druid 0.6.91 Apache Druid 0.6.92 Apache Druid 0.6.93 Apache Druid 0.6.94 Apache Druid 0.6.95 Apache Druid 0.6.96 Apache Druid 0.6.97 Apache Druid 0.6.98 Apache Druid 0.6.99 Apache Druid 0.6.100 Apache Druid 0.6.101 Apache Druid 0.6.102 Apache Druid 0.6.103 Apache Druid 0.6.104 Apache Druid 0.6.105 Apache Druid 0.6.106 Apache Druid 0.6.107 Apache Druid 0.6.108 Apache Druid 0.6.109 Apache Druid 0.6.110 Apache Druid 0.6.111 Apache Druid 0.6.112 Apache Druid 0.6.113 Apache Druid 0.6.114 Apache Druid 0.6.115 Apache Druid 0.6.116 Apache Druid 0.6.117 Apache Druid 0.6.118 Apache Druid 0.6.119 Apache Druid 0.6.120 Apache Druid 0.6.121 Apache Druid 0.6.121.1 Apache Druid 0.6.121.2 Apache Druid 0.6.121.3 Apache Druid 0.6.122 Apache Druid 0.6.123 Apache Druid 0.6.124 Apache Druid 0.6.125 Apache Druid 0.6.126 Apache Druid 0.6.127 Apache Druid 0.6.128 Apache Druid 0.6.129 Apache Druid 0.6.130 Apache Druid 0.6.131 Apache Druid 0.6.132 Apache Druid 0.6.133 Apache Druid 0.6.134 Apache Druid 0.6.135 Apache Druid 0.6.136 Apache Druid 0.6.137 Apache Druid 0.6.138 Apache Druid 0.6.139 Apache Druid 0.6.140 Apache Druid 0.6.141 Apache Druid 0.6.142 Apache Druid 0.6.143 Apache Druid 0.6.144 Apache Druid 0.6.145 Apache Druid 0.6.146 Apache Druid 0.6.147 Apache Druid 0.6.148 Apache Druid 0.6.149 Apache Druid 0.6.150 Apache Druid 0.6.151 Apache Druid 0.6.152 Apache Druid 0.6.153 Apache Druid 0.6.154 Apache Druid 0.6.155 Apache Druid 0.6.156 Apache Druid 0.6.157 Apache Druid 0.6.158 Apache Druid 0.6.159 Apache Druid 0.6.160 Apache Druid 0.6.161 Apache Druid 0.6.162 Apache Druid 0.6.163 Apache Druid 0.6.164 Apache Druid 0.6.165 Apache Druid 0.6.166 Apache Druid 0.6.167 Apache Druid 0.6.169 Apache Druid 0.6.170 Apache Druid 0.6.171 Apache Druid 0.6.172 Apache Druid 0.6.173 Apache Druid 0.6.174 Apache Druid 0.7.0 Apache Druid 0.7.1 Apache Druid 0.7.1.1 Apache Druid 0.7.2 Apache Druid 0.7.3 Apache Druid 0.7.11 Apache Druid 0.8.0 Apache Druid 0.8.1 Apache Druid 0.8.2 Apache Druid 0.8.3 Apache Druid 0.9.0 Apache Druid 0.9.1 Apache Druid 0.9.1.1 Apache Druid 0.9.2 Apache Druid 0.10.0 Apache Druid 0.10.1 Apache Druid 0.11.0 Apache Druid 0.12.0 Apache Druid 0.12.1 Apache Druid 0.12.2 Apache Druid 0.12.3 Apache Druid 0.13.0 Apache Druid 0.14.0 Apache Druid 0.14.1 Apache Druid 0.14.2 Apache Druid 0.15.0 Apache Druid 0.15.1 Apache Druid 0.16.0 Apache Druid 0.16.1 Apache Druid 0.17.0 Apache Druid 0.17.1 Apache Druid 0.18.0 Apache Druid 0.18.1 Apache Druid 0.19.0 Apache Druid 0.20.0 Apache Druid 0.20.1	458

Summary

Vulnerable Configurations

References