CVE-2024-41169
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-12

Last updated on: 2025-11-04

Assigner: Apache Software Foundation

Description
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-12
Last Modified
2025-11-04
Generated
2026-05-07
AI Q&A
2025-07-12
EPSS Evaluated
2026-05-05
NVD
CVE-2024-41169
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
apache zeppelin From 0.10.1 (inc) to 0.12.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-664 The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?

Users are recommended to upgrade Apache Zeppelin to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart