Vulnerabilities > CVE-2022-39337 - Incorrect Authorization vulnerability in Apache Hertzbeat
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization. Version 1.2.1 contains a patch for this issue.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 15 |